Hi,<div><br></div><div>1. &nbsp;&nbsp;&nbsp;&nbsp;I have pam_radius_auth module configured to authenticate the login users. I have configured FreeRadius Server on a linux machine. I want to set the the priority for "local authentication" or "Radius authentication" for SSH. How can I do this?</div><div><br></div><div>2. I have created a user called "user" on client machine with passwd "123qwe" and I have created the same user on server with password "User_12", when authentication request reached the server it is sending "Access-Accept" message back to client, but user is not getting access to the machine(SSH).</div><div><br></div><div>I have following configuration in my /etc/pam.d/ssh file</div><div><br></div><div>auth &nbsp; &nbsp; &nbsp; sufficient &nbsp; &nbsp;pam_radius_auth.so debug</div><div><div>auth &nbsp; &nbsp; &nbsp; required &nbsp; &nbsp; pam_nologin.so</div><div>auth &nbsp; &nbsp; &nbsp; required &nbsp; &nbsp; pam_unix.so</div><div>auth &nbsp; &nbsp; &nbsp; required &nbsp; &nbsp; pam_env.so # [1]</div><div>auth &nbsp; &nbsp; &nbsp; required &nbsp; &nbsp; pam_tally.so deny=10 per_user</div></div><div><br></div><div><div>account &nbsp; &nbsp;required &nbsp; &nbsp; pam_unix.so</div><div>&nbsp;</div><div>session &nbsp; &nbsp;required &nbsp; &nbsp; pam_unix.so</div><div>session &nbsp; &nbsp;optional &nbsp; &nbsp; pam_motd.so # [1]</div><div>session &nbsp; &nbsp;optional &nbsp; &nbsp; pam_mail.so standard noenv # [1]</div><div>session &nbsp; &nbsp;required &nbsp; &nbsp; pam_limits.so</div><div>&nbsp;</div><div>#password &nbsp; required &nbsp; &nbsp; pam_unix.so</div><div>&nbsp;</div><div># Alternate strength checking for password. Note that this</div><div># requires the libpam-cracklib package to be installed.</div><div># You will need to comment out the password line above and</div><div># uncomment the next two in order to use this.</div><div>#</div><div># password required &nbsp; &nbsp; &nbsp; pam_cracklib.so retry=3 minlen=6 difok=3</div><div># password required &nbsp; &nbsp; &nbsp; pam_unix.so use_authtok nullok md5</div><div>&nbsp;password required &nbsp; &nbsp; &nbsp; pam_cracklib.so retry=3 minlen=8 difok=3 lcredit=-1 ucredit=-1 dcredit=-1 ocredit=-1</div><div>&nbsp;password required &nbsp; &nbsp; &nbsp; pam_unix.so use_authtok nullok md5 shadow remember=5</div></div><div><br></div><div>Please let me know If I am making any mistake here. and help me to set the priority.</div><div><br></div><div><br></div><div>Thanx and Regards</div><div>Vijay S.</div>
<br><A HREF="http://sigads.rediff.com/RealMedia/ads/click_nx.ads/www.rediffmail.com/signatureline.htm@Middle?" target="_blank"><IMG SRC="http://sigads.rediff.com/RealMedia/ads/adstream_nx.ads/www.rediffmail.com/signatureline.htm@Middle"></A>