Index: openacs-4/packages/acs-core-docs/www/install-pam-radius.adp =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-core-docs/www/install-pam-radius.adp,v diff -u -r1.4 -r1.5 --- openacs-4/packages/acs-core-docs/www/install-pam-radius.adp 25 Apr 2018 08:38:27 -0000 1.4 +++ openacs-4/packages/acs-core-docs/www/install-pam-radius.adp 3 Sep 2024 15:37:32 -0000 1.5 @@ -1,9 +1,13 @@ -{/doc/acs-core-docs {ACS Core Documentation}} {Install PAM Radius for use as external +{/doc/acs-core-docs/ {ACS Core Documentation}} {Install PAM Radius for use as external authentication} Install PAM Radius for use as external authentication +

Install PAM Radius for use as external -authentication

<authorblurb>

By Malte -Sussdorff -

</authorblurb>

This step by step guide is derived from the installation -instructions which you can find at yourdomain.com/doc/acs-authentication/ext-auth-pam-install.html. +authentication

+

By Malte Sussdorff +

+OpenACS docs are written by the named authors, and may be edited by +OpenACS documentation staff.

This step by step guide is derived from the installation +instructions which you can find at yourdomain.com/doc/acs-authentication/ext-auth-pam-install.html. It is build upon PAM 0.77 (tested) and does not work on RedHat Linux Enterprise 3 (using PAM 0.75). It makes use of the ns_pam module written by Mat Kovach. The instructions given in here do work with PAM LDAP accordingly and differences will be shown at the end of the file.

  1. -Install ns_pam.  Download and install +Install ns_pam. Download and install ns_pam

    [root aolserver]# cd /usr/local/src/aolserver/
               [root aolserver]# wget http://braindamage.alal.com/software/ns_pam-0.1.tar.gz
               [root aolserver]# tar xvfz ns_pam-0.1.tar.gz
               [root aolserver]# cd ns_pam-0.1
               [root ns_pam-0.1]# make install INST=/usr/local/aolserver
               [root ns_pam-0.1]#
    -cd /usr/local/src/aolserver/
    +cd /usr/local/src/aolserver/
     wget http://braindamage.alal.com/software/ns_pam-0.1.tar.gz
     tar xvfz ns_pam-0.1.tar.gz
     cd ns_pam-0.1
     make install INST=/usr/local/aolserver
    -
    +
     
  2. -Configure ns_pam.  Configure AOLserver for +Configure ns_pam. Configure AOLserver for ns_pam

    To enable ns_pam in AOLServer you will first have to edit your config.tcl file and enable the loading of the ns_pam module and configure the aolservers pam configuration file.

      @@ -53,13 +59,13 @@ aolserver

    • Create /etc/pam.d/aolserver.

      -              [root ns_pam]#cp /var/lib/aolserver/service0/packages/acs-core-docs/www/files/pam-aolserver.txt /etc/pam.d/aolserver
      +              [root ns_pam]#cp /var/lib/aolserver/service0/packages/acs-core-docs/www/files/pam-aolserver.txt /etc/pam.d/aolserver
       
  3. -Configure PAM Radius.  Configure and +Configure PAM Radius. Configure and install PAM Radius

    You have to make sure that pam_radius v.1.3.16 or higher is installed, otherwise you will have to install it.

    [root ns_pam]# cd /usr/local/src/
               [root src]# wget ftp://ftp.freeradius.org/pub/radius/pam_radius-1.3.16.tar
    @@ -68,18 +74,18 @@
               [root pam_radius]# make
               [root pam_radius]# cp pam_radius_auth.so /lib/security/
               [root pam_radius]#
    -cd /usr/local/src
    +cd /usr/local/src
     wget ftp://ftp.freeradius.org/pub/radius/pam_radius-1.3.16.tar
     tar xvf pam_radius-1.3.16
     cd pam_radius
     make
     cp pam_radius_auth.so /lib/security/
    -
    +
     

    Next you have to add the configuration lines to your Radius configuration file (/etc/rddb/server). For AOLserver to be able to access this information you have to change the access rights to -this file as well.

    [root pam_radius]# echo "radius.yourdomain.com:1645 your_radius_password >>/etc/rddb/server
    -          [root src]# chown service0:web /etc/rddb/server
    +this file as well.

    [root pam_radius]# echo "radius.yourdomain.com:1645 your_radius_password >>/etc/rddb/server
    +          [root src]# chown service0:web /etc/rddb/server