Re: RSA SecurID Authentication

[Alan DeKok <aland@deployingradius.com>]

Jeremy M. Guthrie wrote:
> The PAM module for RSA(ACE) does work except in one case:
> -  an account in 'next token mode' or 'new pin mode' causes FreeRADIUS to spin 
> out and swallow all of the memory on the host running it till it crashes.

  Ouch.

> I have not nailed down yet if it is PAM or FreeRADIUS but as example, OpenSSH 
> has no issue dealing with either instance.  Not laying blame, I just do not 
> know the root cause of the issue yet.

  It's likely the rlm_pam module.  That code hasn't been touched in a
*long* time.  I don't claim to understand PAM.  I find it very confusing.

  Alan DeKok.