Re: PPP & Shell with the same account

Michael L Judson (judson@linex.com)
Tue, 7 Nov 1995 11:07:34 -0800 (PST)

On Tue, 7 Nov 1995, John W. Temples wrote:

> > Now here's where my problem comes in. We want to issue our users just
> > one username/password pair.
>
> It can't be done with the Livingston RADIUS server as distributed.

But it can.

> > If they come in with the PPP autentication
> > protocol turned on we would like them to get the PPP session. If they
> > type the username/password on the $host login: line we would like them to get
> > to their shell account.
>
> The PM can do this, but it requires modifying the RADIUS server or using
> Merit's server.

I just did a stock install of the RADIUS server and got it to work as
described above. In the /etc/raddb/users file, use "UNIX" as the
password for PPP accounts (so that it uses the host's /etc/passwd
file, and leave security off on the ports on the terminal server.

Or have I committed a grave security risk?