diff options
Diffstat (limited to 'README')
| -rw-r--r-- | README | 52 |
1 files changed, 52 insertions, 0 deletions
@@ -0,0 +1,52 @@ + pam_radius_auth.c + =================== + + This is the PAM to RADIUS authentication module. It allows any +Linux or Solaris machine to become a RADIUS client for authentication +and password change requests. You will need to supply your own RADIUS +server to perform the actual authentication. + + The latest version has a simple merger of the original pam_radius +session accounting code which will work *only* on Linux. + + See INSTALL for instructions on building and installing this module. +I have successfully used it for RADIUS authentication on RedHat 4.2, +RedHat 5.x, RedHat 6.x, and Solaris 2.6. + + A number of options are supported by this module. See USAGE for +more details. + + Care should be taken when configuring RADIUS authentication. Your +RADIUS server should have a minimal set of machines in it's 'clients' +file. The server should NOT be visible to the world at large, but +should be contained behind a firewall. If your RADIUS server is +visible from the Internet, a number of attacks become possible. + + Any additional questions can be directed to: + + Alan DeKok (aland@freeradius.org) + + For the latest version and updates, see the main web or ftp site: + +http://www.freeradius.org/ +ftp://ftp.freeradius.org/pub/radius/ + + + The pam_radius_auth module based on an old version of Cristian +Gafton's pam_radius.c, and on an Apache module I wrote a while back. +(mod_auth_radius.c, also on ftp://ftp.freeradius.org/pub/radius/). + + The source contains a full suite of RADIUS functions, instead of +using libpwdb. It makes sense, because we want it to compile +out of the box on Linux and Solaris 2.6. I also wasn't able to find +much documentation for RADIUS authentication support in libpwdb, so I +rolled my own. + + There are minimal restrictions on using the code, as set out in the +disclaimer and copyright notice in pam_radius_auth.c. + + Building it is straightforward: use GNU make, and type 'make'. If +you've got some other weird make, you'll have to edit the Makefile to +remove the GNU make directives 'ifeq', 'else', etc. + + Alan DeKok <aland@freeradius.org> |