Re: (ASCEND) Shadowed password aging and RADIUS

["Ilker TEMIR (NAD)" <ilker@marketweb.net.tr>]

	Hello,

	I am using a similar configuration, radiusd (I have modified
source to support other features but did nothing about unix authenciation)
on a solaris 2.6. Although I use radius attributes for expiration I tried
locking a unix account using "passwd -l" and then tried authentication by
radius and it failed. Can you please check your shadow entry when the unix
account expired, that may help about solving problem.
	Regards,

	Ilker TEMIR - MarketWeb

> Hi all,
> 
> I already sent this question to ascend support guys but they just told me
> that password expiration matters only for passwords in 'users' flat file.
> 
> I use a MAX TNT box and Solaris 2.5.1 running radius for authentication,
> /etc/radiusd: RADIUS version 1.16 (plus Ascend extensions) 97/02/24
> BINARY_FILTERS ASCEND_SECRET ASCEND_LOGOUT sun SOLARIS with iPass libraries.
> 
> I was wondering if shadowed passwords aging/expiration was taken into account
> by radius for authentication since my tests have proved that users whose
> passwords had already expired for the unix system (Sol251) are rejected by the 
> system but are authenticated by radius, i want to prevent that from happening!
> 
> Of course i am only speaking of users who i.e. have the profile
> DEFAULT Password = "UNIX" and thus rely upon Solaris' shadowed
> passwords for authentication.
> 
> I have sources & libs for this ascend radius and all i require might be
> maybe some patch i could apply and recompile there after a new radius.
> 
> I'll be so grateful to anyone willing to tip me on this,
> 
> Enrique-
> -- 
> ----------------------------------------------
>  RCP - Internet Peru      Tel: +51 1 422-4848 
>  Dpto de Operaciones      Fax: +51 1 421-8086
> ----------------------------------------------
> ++ Ascend Users Mailing List ++
> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
> 

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>