rlm_passwd

Synopsis

The passwd module reads and caches line-oriented files that are in a format similar to '/etc/passwd'. It assumes that each line is composed of a series of records, separated by a delimiter. The records are read from the file, cached, and then placed into one of the packet

The passwd module allows for authorization via any passwd-like file and for extraction of any attributes from these files. See the smbpasswd and etc_group files for more examples.

Table 1. Parameters and descriptions
Parameter	Description
allowmultiplekeys	Use if many records are allowed for a single key.
delimiter	Symbol to use as a field separator in the passwd file; for `format` the ':' symbol is always used. '\0' and '\n' are not allowed.
filename	The path to the filename.
format	The format for filename record. This parameters correlates the record in the passwd file with the RADIUS attributes.
hashsize	The hashtable size. Setting this value to 0 is no longer permitted. A future version of the server will have the module automatically determine the hash size. Having it set manually should not then be necessary.
ignorenislike	Ignore `NIS-related records`.

https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/mods-available/passwd [Default configuration]

Processing Sections

authorization

accounting

post-proxy

recv-coa

send-coa

Expansions

None.

Directives

allowmultiplekeys

Syntax: allowmultiplekeys = boolean
Default: no
Description: Set to yes if many records are allowed for a key. When set to no, the first record for a key in the file is used. Any subsequent records for the same key are silently ignored.

delimiter

Syntax: delimiter = string
Default: :
Description: Field delimiter which separates the records.

filename

Syntax: filename = string
Default: none
Description: The name of the file to read.

format

Syntax: format = string
Default: none
Description: The format of each record.

ignorenislike

Syntax: ignorenislike = boolean
Default: no
Description: Ignore entries in filename which appear to be NIS related. This directive is useful only when reading files such as '/etc/passwd' and '/etc/group'.