<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/src/pam-configs, branch equuleus</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/marekm72/vyos-1x.git/atom?h=equuleus</id>
<link rel='self' href='https://git.amelek.net/marekm72/vyos-1x.git/atom?h=equuleus'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/'/>
<updated>2023-11-20T17:07:11+00:00</updated>
<entry>
<title>PAM: T5577: Optimized RADIUS PAM config</title>
<updated>2023-11-20T17:07:11+00:00</updated>
<author>
<name>zsdc</name>
<email>taras@vyos.io</email>
</author>
<published>2023-09-26T08:27:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=d7457268fcaa5626e512eb00a9aab36f4a617f28'/>
<id>urn:sha1:d7457268fcaa5626e512eb00a9aab36f4a617f28</id>
<content type='text'>
- Added system `radius` group
- Added `mandatory` and `optional` modes for RADIUS
- Improved PAM config for RADIUS

New modes:

- `mandatory` - if RADIUS answered with `Access-Reject`, authentication must be
stopped and access denied immediately.
- `optional` (default) - if RADIUS answers with `Access-Reject`, authentication
continues using the next module.

In `mandatory` mode authentication will be stopped only if RADIUS clearly
answered that access should be denied (no user in RADIUS database, wrong
password, etc.). If RADIUS is not available or other errors happen, it will be
skipped and authentication will continue with the next module, like in
`optional` mode.
</content>
</entry>
<entry>
<title>login: radius: T2089: only query servers when uid matches ...</title>
<updated>2020-03-01T19:03:45+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2020-03-01T19:03:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=fb3eba1d4623e63323c439682e2c7cc2dcb949e1'/>
<id>urn:sha1:fb3eba1d4623e63323c439682e2c7cc2dcb949e1</id>
<content type='text'>
Do not query RADIUS servers when commit is running started from a non RADIUS
user (localuser, root). This should reduce the overall system boot time.
</content>
</entry>
<entry>
<title>radius: T2022: support both local and radius login at the same time</title>
<updated>2020-02-09T14:14:34+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2020-02-09T14:14:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=e76325e6902b9a857b9e544accd5b020439aa8e7'/>
<id>urn:sha1:e76325e6902b9a857b9e544accd5b020439aa8e7</id>
<content type='text'>
</content>
</entry>
<entry>
<title>radius: T1948: supply PAM configuration template</title>
<updated>2020-02-05T18:35:32+00:00</updated>
<author>
<name>Christian Poessinger</name>
<email>christian@poessinger.com</email>
</author>
<published>2020-02-05T18:33:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/marekm72/vyos-1x.git/commit/?id=74329734d3c465675ec3650cb2b8d1cbe8ec0885'/>
<id>urn:sha1:74329734d3c465675ec3650cb2b8d1cbe8ec0885</id>
<content type='text'>
</content>
</entry>
</feed>
