Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
PAM_RADIUS(8)		     System Manager's Manual		   PAM_RADIUS(8)

NAME
     pam_radius -- RADIUS authentication PAM module

SYNOPSIS
     [service-name] module-type control-flag pam_radius [options]

DESCRIPTION
     The  pam_radius  module provides authentication services based upon the RA-
     DIUS (Remote Authentication Dial In User  Service)  protocol  for	the  PAM
     (Pluggable Authentication Module) framework.

     The pam_radius module accepts these optional parameters:

     use_first_pass
		 causes  pam_radius to use a previously entered password instead
		 of prompting for a new one.  If no password  has  been  entered
		 then authentication fails.

     try_first_pass
		 causes  pam_radius to use a previously entered password, if one
		 is available.	If no  password  has  been  entered,  pam_radius
		 prompts for one as usual.

     echo_pass	 causes  echoing to be left on if pam_radius prompts for a pass-
		 word.

     conf=pathname
		 specifies a non-standard location for the RADIUS client config-
		 uration file (normally located in /etc/radius.conf).

     nas_id=identifier
		 specifies a NAS identifier to send instead of the hostname.

     nas_ipaddr[=address]
		 specifies a NAS IP address to be sent.  If option  is	present,
		 but there is no value provided then IP address corresponding to
		 the current hostname will be used.

     template_user=username
		 specifies  a  user whose passwd(5) entry will be used as a tem-
		 plate to create the session environment if the  supplied  user-
		 name  does not exist in local password database.  The user will
		 be authenticated with the supplied username and  password,  but
		 his credentials to the system will be presented as the ones for
		 username,  i.e., his login class, home directory, resource lim-
		 its, etc. will be set to ones defined for username.

		 If this option is omitted, and there is no username in the sys-
		 tem databases equal to the supplied one (as determined by  call
		 to getpwnam(3)), the authentication will fail.

     no_reply_message
		 suppress  printing of the contents of any Reply-Message attrib-
		 utes found in Access-Accept and Access-Reject responses.  These
		 are normally conveyed to the user as  either  informational  or
		 error messages, depending on whether the access request was ac-
		 cepted or rejected.

     no_warn	 suppress  warning messages to the user.  These messages include
		 reasons why the user's authentication attempt was declined.

FILES
     /etc/radius.conf  The  standard  RADIUS  client  configuration   file   for
		       pam_radius

SEE ALSO
     pam(3), passwd(5), radius.conf(5)

HISTORY
     The pam_radius module first appeared in FreeBSD 3.1.  The pam_radius manual
     page first appeared in FreeBSD 3.3.

AUTHORS
     The    pam_radius	 manual   page	 was   written	 by   Andrzej	Bialecki
     <abial@FreeBSD.org>.

     The pam_radius module was written by John D. Polstra <jdp@FreeBSD.org>.

FreeBSD ports 15.quarterly	  May 16, 2018			   PAM_RADIUS(8)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=pam_radius&sektion=8&manpath=FreeBSD+15.1-RELEASE+and+Ports.quarterly>

home | help