I have debug mode set. I get an odd message in my auth logs show my account expired, but it is not. For some reason, when I test with 2-factor, my account gets hosed up and the authentication team has to keep deleting my token then re-initializing for me to test. Here is that snippet in the logs:

auth|security:err|error sshd[4194410]: error: PAM: User account has expired

I’m also seeing these:

auth|security:err|error sshd[5308746]: pam_radius_auth: Failed looking up IP address for RADIUS server

From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Reply-To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
Date: Friday, March 28, 2014 at 2:25 PM
To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
Subject: Re: AIX client to MS RADIUS server

On 28 Mar 2014, at 18:13, Alan DeKok <aland@deployingradius.com> wrote:

Lloyd Gill wrote:

Here is my output of the build. Not clean, but it starts to

authenticate, but logs me out. Anyone have an idea on why the build

produced this?

They are warnings, not errors. Ignore them.

There does appear to be a "debug" config variable.

https://github.com/FreeRADIUS/pam_radius/blob/master/src/pam_radius_auth.c#L139

Set it to any value and you should see some extra debugging messages in the pam logs.

Arran Cudbard-Bell <a.cudbardb@freeradius.org>

FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2