Chapter 5

Pop quiz – user stores

1. The value of the read_groups directive in sql.conf was probably set to no by the previous administrator; changing it to yes will activate reading of the group tables for all users.
2. The freeradius-postgresql package needs to be installed first. This package contains the required set-up files as well as the PostgreSQL-specific FreeRADIUS module.
3. No, you do not authenticate against an SQL database or text files, but rather use them to store credentials. Password verification is then done by an authentication module using the data stored in the text file or the SQL database. (If he's non-technical just tell him no problem, can be done.)
4. Connect to the server through a secure connection and add access control to the directory to restrict access to the userPassword attribute.
5. No, this is not true! You can still use the 'bind as user' method, which limits you to PAP authentication. The nspmPassword attribute, which is available when Universal Password...