authentication request failed for SSH using freeradius server.

[Hailun Tan]

   Which has nothing to do with RADIUS or FreeRADIUS.

----->

I do not agree with this statement as Radius needs to have some other
mechanism to store the user name and password for authentication.  MySQL is
just one of  them.

You cannot break the dependence linkage, isolate the problem then  says it
has nothing to do with Radius. If you  stated that Radius does not have
ability to manage the  other user profile  information like LDAP did much
earlier rather than accusing PAM, It would have save me a lot of time
fixing this problem. Radius lacking this ability to so is definitely
something to do with Radius.

The user who posted the issues on this forum are not expected to be
familiar with Radius as you (nor on PAM  or other modules).


===
 What DOES help is me telling you that you needed to configure NSS.  Which
is what I did.

PS: you never  advised me to configure NSS, in fact,  you did not even
mention NSS before, you just kept pushing me to ask this question on PAM
mailing list.  By the way,  I did ask this question on PAM list and no one
knows what was going on.




On Thu, Jun 28, 2018 at 10:29 AM, Alan DeKok <aland at deployingradius.com>
wrote:

> On Jun 27, 2018, at 7:14 PM, Hailun Tan <dearambermini at gmail.com> wrote:
> > I tried your advice to change the /etc/pam.d/sshd, reboot the ssh service
> > with "sudo service ssh restart".
>
>   This list is not the place to discuss PAM configuration, or PAM
> debugging.
>
> > I have solved this problem by manipulating the  NSS  on the  radius
> client
> > to refer to the MySQL database, which is used by radius server for user
> > name/password storage.
>
>   Which has nothing to do with RADIUS or FreeRADIUS.
>
> > I know the above solution is not directly related to radius.  But anyone
> > working on radius could likely to encounter this issue and saying " this
> > issue has nothing to do with  radius/free radius/ pam_radisu_auth.so"
> would
> > not help.
>
>   Exactly. What DOES help is telling you to ask the PAM people how to fix
> their software.
>
>   What DOES help is me telling you that you needed to configure NSS.
> Which is what I did.
>
>   This isn't a complicated concept.  You were having problems with PAM.
> You were told to go ask the PAM people.  Instead of doing that, you asked
> the same questions here over and over and over and over again.
>
>   What REALLY doesn't help is snarky comments about how to better help
> people.  The only thing preventing you from solving the problem earlier was
> your refusal to follow instructions.
>
>   Now stop posting about PAM issues.  Or else.
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>