Re: Radius CAche???

R.D. Thrush (rd@thrush.com)
Sat, 29 Jun 1996 15:04:55 -0400 (EDT)

>>>>> "Mury" == Mury Johnson <mury@main.goldengate.net> writes:

Mury> That sure doesn't sound like the answer. It would help to know
Mury> if you are using UNIX passwords, or leaving them in the users
Mury> file. With the lack of information provided it sounds like they
Mury> are changing their UNIX password, and not the password in the
Mury> users file. Does restarting radius really solve the
Mury> problem???!!!

I'm afraid the answer to the password caching may be particular to
the unix version. I've not had a problem with my radius mods having
trouble with `stale' password data. I now know the reason.

I use parts from FreeBSD 2.1 to build a private shadow passwd which
my radius servers use when authenticating for `Password = "UNIX"'. It
turns out that the FreeBSD version of getpwnam() results in opening
and closing the shadow passwd file upon each invocation. While not
great for performance, it avoids the problem of `staleness'.