13 Dec
2007
13 Dec
'07
4:52 a.m.
Jeremy M. Guthrie wrote:
The PAM module for RSA(ACE) does work except in one case: - an account in 'next token mode' or 'new pin mode' causes FreeRADIUS to spin out and swallow all of the memory on the host running it till it crashes.
Ouch.
I have not nailed down yet if it is PAM or FreeRADIUS but as example, OpenSSH has no issue dealing with either instance. Not laying blame, I just do not know the root cause of the issue yet.
It's likely the rlm_pam module. That code hasn't been touched in a *long* time. I don't claim to understand PAM. I find it very confusing. Alan DeKok.