Thanks in advance and regards,
---------------------------------------------------------------
Yohannes Aries Sulistyono email : aries@idola.net.id
Internet Service http://www.idola.net.id/~aries
PT Aplikanusa Lintasarta Phone : +6221-2302345
Menara Thamrin 12th Fl Fax : +6221-2303883
Jl MH Thamrin kav 3 HP : 0811-142838
JAKARTA - 10340
INDONESIA
---------------------------------------------------------------
On Tue, 25 Feb 1997, Walter wrote:
> I don't like password files that don't have any kind of
> encryption, so I'd go for UNIX encrypted passwords.
> However, keep in mind that you'll need to update
> the /etc/passwd file on your unix system (you'll NEED an unix
> system btw) AND you radius "users" file.
> Another thing is that Ascend ISDN terminal servers
> don't like UNIX passwords.. (AFAIK that's what they told me)
>
> Keep in mind that you don't give radius callers access on your
> unix system.. So make the default shell for every user /bin/false...
> Also protect rlogin, ftp, etc etc ... Your system could allow
> a valid radius user to login at your machine.
> However, some "hacker" or collegue could just copy/print the
> radius users file ... Image a few hundred radius accounts public
> available :--(
>
> At 14:08 25-02-97 +0700, you wrote:
> >Hi there,
> >Can anyonw tell me which file is better for authentication, UNIX file or
> >Radius Database file?
> >Also, how is about the performance, security, and easy-to-maintain of
> >that each file? Because as I look at the Radius database file (filename :
> >users), the password is typed as clear text.
>
>
> Greetinx Earthling,
> Walter Tak
> walter@concepts.nl
>