Re: Are there good reasons for running radiusd as user 'root'?

Maurice Makaay <[email protected]> wrote:

> I have written a wrapper script to startup my radiusd as the user and group
> radius/radius. This all seems to work OK. Now I'm wondering: are there
> any good reasons for running the radiusd as user 'root'?

You only have to run it as root if you plan to use Auth-Type = System
and/or Auth-Type = PAM. Otherwise it is OK to run radiusd with usual user
privileges, provided that the logging directory is writable for that
user or group (the default /var/log obviously isn't).

> What I would like to see in radiusd (if it makes sense not to
> run the program as 'root') is a patch to be able to configure the user
> and group you want to run the program as.

That is reasonable. I'll surely add the feature.

Thank you,
Sergey