Hey Matthew, You were right. There was a DNS lookup happening. All fixed and working swimmingly now. Thanks. -- Steve. On 28/04/2017, 8:10 PM, "Freeradius-Users on behalf of Matthew Newton" <freeradius-users-bounces+steve=focb.co.nz@lists.freeradius.org on behalf of mcn4@leicester.ac.uk> wrote: Given that between these two log lines On Fri, Apr 28, 2017 at 04:35:21PM +1000, Steve Phillips wrote: > Apr 28 16:09:40 bastion sshd[9197]: pam_radius_auth: ignore last_pass, force_prompt set <here> > Apr 28 16:10:00 bastion sshd[9197]: pam_radius_auth: Sending RADIUS request code 1 there is a call to add a RADIUS attribute with details of the remote host the user is connecting from, I would suspect that there is a missing reverse DNS entry for it. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html