OS X 10.5 Server comes with a Radius server, but at the surface, it seems that Apple only ships with support for wireless access stations. However, the foundation is a fully working FreeRadius server.

When trying to get the Radius server to work together with our Checkpoint firewall for VPN authentication, I found that the Radius server tries to authenticate the users against the /etc/passwd file. However, for authorization, it correctly queries the OpenDirectory. I opened a support shout

with Apple, and I eventually received the following directions to change the behavior.

Read on to see the response I received from Apple…
Here’s what Apple told me…(robg adds: I have trimmed the mail from Apple, and edited it a bit for easier reading, but I didn’t modify any of the actual instructions):

Apple included RADIUS services in Leopard server to Apply sup…

Original post by Mike Schramm