Introduction

Components involved

Installation

Replication of production setup

packages: shorewall

New stuff

FreeRADIUS

packages: freeradius

Certificates

MySQL

Python

Shorewall

sudo

packages: sudo

shwl_add / shwl_del scripts

packages: arp-scan

pam_to_mysql_update.sh script

apt-get install libpam-script sshpass
mkdir /usr/share/libpam-script/pam-script.d/pam_to_mysql_update
cd /usr/share/libpam-script/pam-script.d/pam_to_mysql_update
# Put the script in here, and configure variables inside
ln -s pam_to_mysql_update.sh pam_script_auth
ln -s pam_to_mysql_update.sh pam_script_passwd

Add the following line at the end of /etc/pam.d/common-auth or as may be appropriate to the PAM configuration of the system:

...
auth	required                        pam_script.so onerr=fail dir=/usr/share/libpam-script/pam-script.d/pam_to_mysql_update/

Add the following line at the end of /etc/pam.d/common-password or as may be appropriate to the PAM configuration of the system:

...

password	required                        pam_script.so onerr=fail dir=/usr/share/libpam-script/pam-script.d/pam_to_mysql_update/