<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" 'http://www.w3.org/TR/html4/loose.dtd"'>
<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Install PAM Radius for use as external authentication</title><link rel="stylesheet" type="text/css" href="openacs.css"><meta name="generator" content="DocBook XSL Stylesheets V1.79.2"><link rel="home" href="index.html" title="OpenACS Core Documentation"><link rel="up" href="install-more-software.html" title="Appendix B. Install additional supporting software"><link rel="previous" href="install-squirrelmail.html" title="Install Squirrelmail for use as a webmail system for OpenACS"><link rel="next" href="install-ldap-radius.html" title="Install LDAP for use as external authentication"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><a href="http://openacs.org"><img src="/doc/images/alex.jpg" style="border:0" alt="Alex logo"></a><table width="100%" summary="Navigation header" border="0"><tr><td width="20%" align="left"><a accesskey="p" href="install-squirrelmail.html">Prev</a> </td><th width="60%" align="center">Appendix B. Install additional supporting software</th><td width="20%" align="right"> <a accesskey="n" href="install-ldap-radius.html">Next</a></td></tr></table><hr></div><div class="sect1"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="install-pam-radius"></a>Install PAM Radius for use as external authentication</h2></div></div></div>
<span style="color: red"><authorblurb>
<p>By <a class="ulink" href="mailto:openacs@sussdorff.de" target="_top">Malte Sussdorff</a></p>
</authorblurb></span>
<p>This step by step guide is derived from the installation instructions which you can find at <em class="replaceable"><code>yourdomain.com</code></em>/doc/acs-authentication/ext-auth-pam-install.html. It is build upon PAM 0.77 (tested) and does not work on RedHat Linux Enterprise 3 (using PAM 0.75). It makes use of the ns_pam module written by Mat Kovach. The instructions given in here do work with PAM LDAP accordingly and differences will be shown at the end of the file.</p>
<div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem"><a name="install-ns_pam"></a>
<p>
<b>Install ns_pam. </b>
Download and install ns_pam
</p>
<pre class="screen">[root aolserver]# <strong class="userinput"><code>cd /usr/local/src/aolserver/</code></strong>
[root aolserver]# <strong class="userinput"><code>wget http://braindamage.alal.com/software/ns_pam-0.1.tar.gz</code></strong>
[root aolserver]# <strong class="userinput"><code>tar xvfz ns_pam-0.1.tar.gz</code></strong>
[root aolserver]# <strong class="userinput"><code>cd ns_pam-0.1</code></strong>
[root ns_pam-0.1]# <strong class="userinput"><code>make install INST=/usr/local/aolserver</code></strong>
[root ns_pam-0.1]#
<span class="action">cd /usr/local/src/aolserver/
wget http://braindamage.alal.com/software/ns_pam-0.1.tar.gz
tar xvfz ns_pam-0.1.tar.gz
cd ns_pam-0.1
make install INST=/usr/local/aolserver
</span>
</pre>
</li><li class="listitem"><a name="configure-ns_pam"></a>
<p>
<b>Configure ns_pam. </b>
Configure AOLserver for ns_pam
</p>
<p>To enable ns_pam in AOLServer you will first have to edit your config.tcl file and enable the loading of the ns_pam module and configure the aolservers pam configuration file.</p>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p>
Change <span class="emphasis"><em>config.tcl</em></span>. Remove the
<span class="emphasis"><em>#</em></span> in front of <code class="computeroutput">ns_param
nspam ${bindir}/nspam.so</code> to enable the loading
of the ns_pam module.
</p></li><li class="listitem"><p>
Change <span class="emphasis"><em>config.tcl</em></span>. Replace
<code class="computeroutput">pam_domain</code> in the section
<code class="computeroutput">ns/server/${server}/module/nspam</code>
with <strong class="userinput"><code>aolserver</code></strong>
</p></li><li class="listitem"><p>Create <span class="emphasis"><em>/etc/pam.d/aolserver</em></span>.
</p><pre class="screen">
[root ns_pam]#<strong class="userinput"><code>cp /var/lib/aolserver/<em class="replaceable"><code>service0</code></em>/packages/acs-core-docs/www/files/pam-aolserver.txt /etc/pam.d/aolserver</code></strong>
</pre>
</li></ul></div>
</li><li class="listitem"><a name="configure-pam-radius"></a>
<p>
<b>Configure PAM Radius. </b>
Configure and install PAM Radius
</p>
<p>You have to make sure that pam_radius v.1.3.16 or higher is installed, otherwise you will have to install it.</p>
<pre class="screen">[root ns_pam]# <strong class="userinput"><code>cd /usr/local/src/</code></strong>
[root src]# <strong class="userinput"><code>wget ftp://ftp.freeradius.org/pub/radius/pam_radius-1.3.16.tar</code></strong>
[root src]# <strong class="userinput"><code>tar xvf pam_radius-1.3.16</code></strong>
[root src]# <strong class="userinput"><code>cd pam_radius</code></strong>
[root pam_radius]# <strong class="userinput"><code>make</code></strong>
[root pam_radius]# <strong class="userinput"><code>cp pam_radius_auth.so /lib/security/</code></strong>
[root pam_radius]#
<span class="action">cd /usr/local/src
wget ftp://ftp.freeradius.org/pub/radius/pam_radius-1.3.16.tar
tar xvf pam_radius-1.3.16
cd pam_radius
make
cp pam_radius_auth.so /lib/security/
</span>
</pre>
<p>Next you have to add the configuration lines to your Radius configuration file (/etc/rddb/server). For AOLserver to be able to access this information you have to change the access rights to this file as well.</p>
<pre class="screen">[root pam_radius]# <strong class="userinput"><code>echo "radius.<em class="replaceable"><code>yourdomain.com</code></em>:1645 <em class="replaceable"><code>your_radius_password</code></em> >>/etc/rddb/server</code></strong>
[root src]# <strong class="userinput"><code>chown <em class="replaceable"><code>service0</code></em>:web /etc/rddb/server</code></strong>
</pre>
</li></ol></div>
</div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="install-squirrelmail.html">Prev</a> </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right"> <a accesskey="n" href="install-ldap-radius.html">Next</a></td></tr><tr><td width="40%" align="left">Install Squirrelmail for use as a webmail system for OpenACS </td><td width="20%" align="center"><a accesskey="u" href="install-more-software.html">Up</a></td><td width="40%" align="right"> Install LDAP for use as external authentication</td></tr></table><hr><address><a href="mailto:docs@openacs.org">docs@openacs.org</a></address></div><a name="comments"></a></body></html>