If I dont configure step 4, I am not locked out on the client. <div><br><div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">4- Added following line to /etc/pam.d/common_session</div>
<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">session required pam_radius_auth.so</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">Thanks</div><br><div class="gmail_quote">On Mon, Feb 4, 2013 at 4:47 PM, Deepti kulkarni <span dir="ltr">&lt;<a href="mailto:deepti.kdeeps@gmail.com" target="_blank">deepti.kdeeps@gmail.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<div><br></div><div>I have a debian machine that acts as RADIUS client talking with the Freeradius server. I have configured PAM on the client, so made following changes.</div>
<div><br></div><div>1 - Added radiusd to /etc/pam.d which contains -</div>
<div>@include common-auth</div><div>@include common-account</div><div>@include common-password</div><div>@include common-session</div><div> </div><div><br></div><div>2 - Added following line to /etc/pam.d/common_auth</div>

<div>auth sufficient pam_radius_auth.so</div><div><br></div><div>3 - Added following line to /etc/pam.d/common_account</div><div>account required pam_radius_auth.so</div><div><br></div><div>4- Added following line to /etc/pam.d/common_session</div>

<div>session required pam_radius_auth.so</div><div><br></div><div>5 - Added server-ip and secret key to /etc/pam_radius_auth.conf</div><div><br></div><div>Authentication and accounting works fine after I configure the above on the client. As soon as I reboot client, login fails with error - &quot;cannot make/remove an entry for the specified session&quot;. Cannot login into the client.</div>

<div><br></div><div>Thanks</div><div><br></div>
</blockquote></div><br></div></div>