vrosnet / pam_radius Goto Github PK

                pam_radius_auth.c
               ===================

  This is the PAM to RADIUS authentication module.  It allows any
Linux or Solaris machine to become a RADIUS client for authentication
and password change requests.  You will need to supply your own RADIUS
server to perform the actual authentication.

  The latest version has a simple merger of the original pam_radius
session accounting code which will work *only* on Linux.

  See INSTALL for instructions on building and installing this module.
I have successfully used it for RADIUS authentication on RedHat 4.2,
RedHat 5.x, RedHat 6.x, and Solaris 2.6.

  A number of options are supported by this module.  See USAGE for
more details.

  Care should be taken when configuring RADIUS authentication.  Your
RADIUS server should have a minimal set of machines in it's 'clients'
file.  The server should NOT be visible to the world at large, but
should be contained behind a firewall.  If your RADIUS server is
visible from the Internet, a number of attacks become possible.

  Any additional questions can be directed to:

  Alan DeKok ([email protected])

  For the latest version and updates, see the main web or ftp site:

http://www.freeradius.org/
ftp://ftp.freeradius.org/pub/radius/


  The pam_radius_auth module based on an old version of Cristian
Gafton's pam_radius.c, and on an Apache module I wrote a while back.
(mod_auth_radius.c, also on ftp://ftp.freeradius.org/pub/radius/).

  The source contains a full suite of RADIUS functions, instead of
using libpwdb.  It makes sense, because we want it to compile
out of the box on Linux and Solaris 2.6.  I also wasn't able to find
much documentation for RADIUS authentication support in libpwdb, so I
rolled my own.

  There are minimal restrictions on using the code, as set out in the
disclaimer and copyright notice in pam_radius_auth.c.

  Building it is straightforward: use GNU make, and type 'make'.  If
you've got some other weird make, you'll have to edit the Makefile to
remove the GNU make directives  'ifeq', 'else', etc.

  Alan DeKok <[email protected]>