Re: Authentication File

Yohannes A Sulistyono (aries@idola.net.id)
Tue, 4 Mar 1997 12:49:08 +0700 (GMT+0700)

So, do you mean we can not encrypt user password if we use file USERS?
Also, which one is better for large amount of user (more than 8000
users), file USERS or file /etc/passwd?

Thanks in advance and regards,
---------------------------------------------------------------
Yohannes Aries Sulistyono email : aries@idola.net.id
Internet Service http://www.idola.net.id/~aries
PT Aplikanusa Lintasarta Phone : +6221-2302345
Menara Thamrin 12th Fl Fax : +6221-2303883
Jl MH Thamrin kav 3 HP : 0811-142838
JAKARTA - 10340
INDONESIA
---------------------------------------------------------------

On Tue, 25 Feb 1997, Walter wrote:

> I don't like password files that don't have any kind of
> encryption, so I'd go for UNIX encrypted passwords.
> However, keep in mind that you'll need to update
> the /etc/passwd file on your unix system (you'll NEED an unix
> system btw) AND you radius "users" file.
> Another thing is that Ascend ISDN terminal servers
> don't like UNIX passwords.. (AFAIK that's what they told me)
>
> Keep in mind that you don't give radius callers access on your
> unix system.. So make the default shell for every user /bin/false...
> Also protect rlogin, ftp, etc etc ... Your system could allow
> a valid radius user to login at your machine.
> However, some "hacker" or collegue could just copy/print the
> radius users file ... Image a few hundred radius accounts public
> available :--(
>
> At 14:08 25-02-97 +0700, you wrote:
> >Hi there,
> >Can anyonw tell me which file is better for authentication, UNIX file or
> >Radius Database file?
> >Also, how is about the performance, security, and easy-to-maintain of
> >that each file? Because as I look at the Radius database file (filename :
> >users), the password is typed as clear text.
>
>
> Greetinx Earthling,
> Walter Tak
> walter@concepts.nl
>