How to configure freeradius with local users

OS: Debian9
Package: Freeradius 3.0
Hostname: srv1

This is step by step how to configure freeradius with local users (/etc/passwd)
In this scenario, I want to create 100 users with a password and no shell login to the system capability that can be done with the following commands:

for i in `seq 1 1 100`
do
useradd user$i
echo -e "P@ssw0rd\nP@ssw0rd" | passwd user$i
done




common-auth-radius  is for radius users

Edit like below:


And then configure no login with PAM pam_list_file in the /etc/pam.d/common-auth to limit login to the system


Only users in the /etc/loginusers can login to the system
Create a file loginusers in the /etc/



Because FreeRADIUS 3 no longer accepts "Auth-Type := System". It's by default use unix pasword so we want to just configure for client use like below:




/etc/init.d/freeradius restart

Testing in srv2, we need to install freeradius-utils for testing purpose, use radtest




Note:
Debug mode
/etc/init.d/freeradius stop
freeradius -X



Komentar

Postingan populer dari blog ini

Cara memahami dan menghafal model OSI dengan analogi

Pembahasan IT Network Systems Administration Module A DNS (Forward Zone, Reverse Zone, CNAME, MX, Split View)

Table of Contents