freebsd and

[Bill Moran]

(don't see why this was on -current)

In response to gahn <ipfreak at yahoo.com>:
> hi all:
> 
> i set up the freeradius 21.100.1 on freebsd 8.1. it uses local authentication database of /etc/passwd (thanks to the previous discussions alan did with others). the problem is: it only works with the condition of the server id running as "root" instead of "freeradius" due to the one way MD5 hash of /etc/passwd file.
> 
> are there any other better ways to implement this?

a) Put the Radius server in a jail, so it can run as root without all the
   security concerns.
b) Use something other than /etc/passwd authentication

-- 
Bill Moran
http://www.potentialtech.com
http://people.collaborativefusion.com/~wmoran/