(PM) mysterious logins

Samudra E Haque (haque@pradeshta.net)
Thu, 23 Jul 1998 23:36:42 +0600 (BGT)

I'm curious, and (based upon experience of two months..) my utmp/wtmp
records on our radius host shows 'root' logins INTO the host from our
PM2E, yet for that corresponding period, there is no matching radius
accounting records!

The logins are at a time when we are not usually around. The logins on the
host are found by the 'last command', and the radius accounting logs are
also on the same host in a different directory.

We use system authentication on our RADIUS server, which I have found also
lets me get into the network when dialing into the PM2E and giving the
'root' password of the radius host. Is there anyway to PREVENT a user
being authenticated by radius but remaining authenticated by the system
security - in essence similiar to /etc/ftpuser block list?

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>