Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to configure FreeRadius to work with my external authentification script.

I have a custom module

exec myscript {
        wait = yes
        shell_escape = yes
        program = "/path/to/myscript %{Stripped-User-Name} %{User-Password}"

and this works. However, I am concerned because plaintext passwords are passed as a command line arguments to the script, so ps run at opportune moment could reveal passwords.

It would be much better if I could write arguments to a protected file from which myscript can read them. I haven't been able to find how to do this. Is it possible, and how?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.