15 Apr
2014
15 Apr
'14
9:44 p.m.
David Li wrote:
I took out all the pam modules from my auth stack in /etc/pam/sshd except for pam_radius_auth. The problem didn't go away. I am not using SElinux either.
I don't know. PAM is... weird. It makes RADIUS look sane and pretty.
One interesting thing I noticed is that first login attempt always fails due to this problem. But the second attempt after restarting the ssh session then it succeeds. This makes me wonder if somehow the password was stored on the first try and correctly retrieved on the second try. But I have no clue what happened.
Ask the PAM people. I don't know much about it myself, sorry. Alan DeKok.