How do I enable RSA authentication (i've already read the FreeBSD handbook on this... Post: 34563

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Clearify what it means under 'WHAT' when hit the 'w'-command

I wonder how I shall read the result below, especially 'what' shown below. The result was shown when I entered 'w'. E.g what is TOP? What is gosh ( what does selmgr mean?)? login@ idle JCPU PCPU what 6:15am 7:04 39 39 TOP 6:34am 6:45 45 45 TOP 6:41am ...

2. IP Networking

BELKIN 'F5D5020' 16bit PCMCIA - FreeBSD HOWTO

Hey all, I've bought a few bits from Belkin who seem quite happy to support FreeBSD! Last time I bought a UPS from them and it's still going well :D I saw this on their website that the 16bit PCMCIA card was supported under FreeBSD: http://www.belkin.com/network/F5D5020.html I went to my...

3. UNIX Desktop Questions & Answers

FreeBSD 4.7 X issues - assistance req'd please

question: i just installed FreeBSD 4.7 on my laptop, when i log in as root, i can startx no problem at all but when i try to start it as a user, i can't. otiginally it told me i needed to be a member of the group 'wheel' to do startx, no problem, added myself in /etc/group, but for some reason i...

4. UNIX for Advanced & Expert Users

How to remove a file with a leading dash '-' in it's name?

Somehow someone created a file named '-ov' in the root directory. Given the name, the how was probably the result of some cpio command they bozo'ed. I've tried a number of different ways to get rid of it using * and ? wildcards, '\' escape patterns etc.. They all fail with " illegal option --...

5. Shell Programming and Scripting

What are the differences between 'bash' and 'sh'

Hopefully this doesn't come off as too much of a "newbie" question or a flamebait. But I have recently begun working with a Sun Solaris box after having spent the past five years working with RedHat. From what i can tell, thing look fairly similar and the 'man' command is some help. But I've...

6. UNIX for Advanced & Expert Users

ssh RSA authentication failure

I am using an ssh pub key on two remote servers to allow ssh session without authentication. Both servers have the same id_rsa.pub copied from the host into the remote servers ~user/.ssh/authorized_keys. There is no passphrase for this key either. The problem is that I am able to ssh into one...

7. UNIX for Dummies Questions & Answers

SSH with RSA keys - error contacting the authentication agent

Hi all, Basic Requirement: To SFTP large files (usually 10GB). We use webMethods 6.1.2 (installed on Unix) as the orchstrator and make underlying Unix system calls to do the processing. That is, if we have to SFTP a large file - webMethods will invoke a Perl script on the underlying Unix...

8. Shell Programming and Scripting

Password-less RSA Authentication not working

Hello Friends, I know this issue has been raised many times and hence I tried every resolution provided in the forum before I posted this issue again. My Password-less RSA authentication was working fine for quite some time. Whenever the remote server password used to change I used to re-do...

9. BSD

How to enable FreeBSD 4.11 audits service?

Dear all My FreeBSD is version 4.11, I want to enable audit, Can anyone has a step by step document ? In FreeBSD.org I see the doc look like need recompile kernel? Is it really..? Thanks and happy new years.

LEARN ABOUT FREEBSD

pam_tacplus

PAM_TACPLUS(8)						    BSD System Manager's Manual 					    PAM_TACPLUS(8)

NAME

     pam_tacplus -- TACACS+ authentication PAM module

SYNOPSIS

     [service-name] module-type control-flag pam_tacplus [options]

DESCRIPTION

     The pam_tacplus module provides authentication services based upon the TACACS+ protocol for the PAM (Pluggable Authentication Module) frame-
     work.

     The pam_tacplus module accepts these optional parameters:

     use_first_pass  causes pam_tacplus to use a previously entered password instead of prompting for a new one.  If no password has been entered
		     then authentication fails.

     try_first_pass  causes pam_tacplus to use a previously entered password, if one is available.  If no password has been entered, pam_tacplus
		     prompts for one as usual.

     echo_pass	     causes echoing to be left on if pam_tacplus prompts for a password.

     conf=pathname   specifies a non-standard location for the TACACS+ client configuration file (normally located in /etc/tacplus.conf).

     template_user=username
		     specifies a user whose passwd(5) entry will be used as a template to create the session environment if the supplied username
		     does not exist in local password database.  The user will be authenticated with the supplied username and password, but his
		     credentials to the system will be presented as the ones for username, i.e., his login class, home directory, resource limits,
		     etc. will be set to ones defined for username.

		     If this option is omitted, and there is no username in the system databases equal to the supplied one (as determined by call
		     to getpwnam(3)), the authentication will fail.

FILES

     /etc/tacplus.conf	The standard TACACS+ client configuration file for pam_tacplus

SEE ALSO

     passwd(5), tacplus.conf(5), pam(8)

HISTORY

     The pam_tacplus module first appeared in FreeBSD 3.1.

AUTHORS

     The pam_tacplus manual page was written by Andrzej Bialecki <abial@FreeBSD.org> and adapted to TACACS+ from RADIUS by Mark R V Murray
     <markm@FreeBSD.org>.

     The pam_tacplus module was written by John D. Polstra <jdp@FreeBSD.org>.

BSD
								  August 2, 1999							       BSD