Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to configure FreeRadius to work with my external authentification script.

I have a custom module

exec myscript {
        wait = yes
        shell_escape = yes
        program = "/path/to/myscript %{Stripped-User-Name} %{User-Password}"
}

and this works. However, I am concerned because plaintext passwords are passed as a command line arguments to the script, so ps run at opportune moment could reveal passwords.

It would be much better if I could write arguments to a protected file from which myscript can read them. I haven't been able to find how to do this. Is it possible, and how?

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.