> I just did a stock install of the RADIUS server and got it to work as
> described above. In the /etc/raddb/users file, use "UNIX" as the
> password for PPP accounts (so that it uses the host's /etc/passwd
> file, and leave security off on the ports on the terminal server.
For PPP and radius I had to set security on. That tells the PM to query the host for radius authentication.
>
> Or have I committed a grave security risk?
No, but I think you misunderstood what the original poster wants to do.
He wants to allow users to have a single username which will give them
both a shell and a PPP login depending on how they log in. That can't
be done with Livingston's RADIUS server.
-- John W. Temples, III || Providing the first public access Internet Gulfnet Kuwait || site in the Arabian Gulf region