Login or Register to Ask a Question and Join Our Community


Red Hat

RADIUS server for SSH authorization

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems Linux Red Hat RADIUS server for SSH authorization
# 1  
Old 05-03-2011
RADIUS server for SSH authorization
Good day to anyone. I need your help.
I want to create a centralization server for authorization my users via SSH connections. My manager suggested me a RADIUS + PAM, but frankly speaking I read a lot information about these and understood one thing - RADIUS could work only with password authorization. It means I should create users without password on every RHEL system. I tested for myself freeradius and I think this soft can't create and keep users accounts with right permissions (gid, uid, group) - ONLY password authorization. Am I right ? I really read a lot documents in the Internet and all manual include next step "... you must create a user on client server for login ..."

What I need. I want to have clear server which will be setted on authorization server. Withous any users and groups. Clear. I'll connect from my PC via SSH to some server and last one should request information about my account from authorization server. Then it should load my defauld profile, permissions and "clear system" which hasn't any users and group shoud understand my rights (gid, uid, group).

Is it possible ? I think try LDAP+PAM+SSH. Any ideas ?
Thanks and sorry for my bad english.
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Radius authorization on Linux clients

Hello folks, I was guessing if there is a way for configuring Radius authorization on Linux clients. My meaning is to make Radius server manage the authorization/permissions when executing any commnand on my linux servers. Then, there's any way to configure this with Radius? can I also... (1 Reply)
Discussion started by: carpannav
1 Replies

2. Shell Programming and Scripting

Connect (SSH) to Windows server via Linux server through a script and passing command.. but failing

I am trying to connect to Windows server via Linux server through a script and run two commands " cd and ls " But its giving me error saying " could not start the program" followed by the command name i specify e g : "cd" i am trying in this manner " ssh username@servername "cd... (5 Replies)
Discussion started by: sunil seelam
5 Replies

3. Shell Programming and Scripting

Using ssh to add register key on ssh server

Hi, I want to use ssh to add a register key on remote ssh server. Since there are space characters in my register key string, it always failed. If there is no space characters in the string, it worked fine. The following is what I have tried. It seems that "ssh" command doesn't care about double... (9 Replies)
Discussion started by: leaftree
9 Replies

4. IP Networking

Authentication WAP with RADIUS Server

Network Configuration Figure http://geocities.com/fy_heng/test1.JPG Dear all, I currently performing an testing using the above network configuration (Please click on the above link). On how actually the RADIUS server can authenticate the user who connect to the WAP (wireless access point)... (0 Replies)
Discussion started by: Paris Heng
0 Replies

5. Cybersecurity

What's the difference between an SSH Client and an SSH Server?

Eh... yeah. What the title says. :D (1 Reply)
Discussion started by: PSC
1 Replies
Login or Register to Ask a Question

LEARN ABOUT SUSE

pppd-radius

PPPD-RADIUS(8)						      System Manager's Manual						    PPPD-RADIUS(8)

NAME

       radius.so - RADIUS authentication plugin for pppd(8)

SYNOPSIS

       pppd [ options ] plugin radius.so

DESCRIPTION

       The  RADIUS  plugin for pppd permits pppd to perform PAP, CHAP, MS-CHAP and MS-CHAPv2 authentication against a RADIUS server instead of the
       usual /etc/ppp/pap-secrets and /etc/ppp/chap-secrets files.

       The RADIUS plugin is built on a library called radiusclient which has its own configuration files (usually in  /etc/radiusclient),  consult
       those files for more information on configuring the RADIUS plugin

OPTIONS

       The RADIUS plugin introduces one additional pppd option:

       radius-config-file filename
	      The  file  filename  is  taken  as  the  radiusclient  configuration  file.   If	this  option  is  not  used,  then the plugin uses
	      /etc/radiusclient/radiusclient.conf as the configuration file.

       avpair attribute=value
	      Adds an Attribute-Value pair to be passed on to the RADIUS server on each request.

       map-to-ifname
	      Sets Radius NAS-Port attribute to number equal to interface name (Default)

       map-to-ttyname
	      Sets Radius NAS-Port attribute value via libradiusclient library

USAGE

       To use the plugin, simply supply the plugin radius.so option to pppd, and edit /etc/radiusclient/radiusclient.conf appropriately.   If  you
       use  the  RADIUS  plugin,  the  normal  pppd authentication schemes (login, checking the /etc/ppp/*-secrets files) are skipped.	The RADIUS
       server should assign an IP address to the peer using the RADIUS Framed-IP-Address attribute.

SEE ALSO

       pppd(8) pppd-radattr(8)

AUTHOR

       David F. Skoll <dfs@roaringpenguin.com>

																    PPPD-RADIUS(8)