On Tue, Feb 1, 2011 at 12:24 PM, vijay s sheelavantar < s_vijay65@rediffmail.com> wrote:
Hello Friends,
I am getting following error while authenticating users. The request from pam_radius is reaching radius server and server is sending "Access-Accept". but client is not able to receive this message.
Feb 1 14:25:40 (none) sshd[27321]: pam_radius_auth: Got user name user Feb 1 14:25:42 (none) sshd[27321]: pam_radius_auth: Sending RADIUS request code 1 Feb 1 14:25:42 (none) sshd[27321]: pam_radius_auth: DEBUG: getservbyname(radius, udp) returned 722322004. Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: RADIUS server 19.1.1.2 failed to respond Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: DEBUG: get_ipaddr(other-server) returned 0. Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: Failed looking up IP address for RADIUS server other-serve r (errcode=9) Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: All RADIUS servers failed to respond. Feb 1 14:25:45 (none) sshd[27321]: pam_radius_auth: authentication failed
Are you using Ubuntu + libpam-radius-auth, by any chance? If yes, the config is /etc/pam_radius_auth.conf (even if the file still says "Copy to: /etc/raddb/server"). My test config file simply has these lines: 127.0.0.1 testing123 1 All other lines are commented out, and the test work just fine with radius server running on localhost.
From your logs it looks like you forgot to comment-out the example "other-server" entry.
Also, is 19.1.1.2 the IP of your radius server? Some things can cause the client not receive radius reply correctly (like when the radius server has multiple IP address). To narrow down the problem, you should test with radtest/radclient/whatever-your-favorite-radius-auth-test-tool first. -- Fajar