29 May
2012
29 May
'12
8:52 a.m.
sam wrote:
I setup the pam_radius_auth.so in pam.d/sshd to verify the user using the remote Radius server.... I think the message flow is right, but at the point-2 and point-4, the prompt should be popped and ask us to input the passwd. However, our freeradius sends the access-Request automatically.
It's not FreeRADIUS. It's the pam_radius_auth module. The application needs to support showing the challenges. In this case, it's sshd. If sshd doesn't support challenges, then it won't work. Alan DeKok.