On Apr 20, 2015, at 8:36 AM, ademaiasantos@gmail.com wrote:

i cant install two radius on a server for do it? if yes, how?

What part of my message is unclear?

if not, please let me know any script like radius do that

To do *what*? The module already uses 2 RADIUS servers. One is a primary, one is a secondary. This is "fail-over". This is how the module is documented to work. If you want the module to do something else, then you need to explain WHAT you want it to do. So far, you're just saying "it has to behave differently" Send a *useful* message to the list. Explain what you want to do, and why. We're not mind readers. Alan DeKok.

On Apr 20, 2015, at 8:48 AM, ademaiasantos@gmail.com wrote:

i want tow servers work together, secound server will work when first server have fail-over , right?, ok, now i want second server work without fail-over, understand?

No.

for example first server send user1 and second server send user2, i want they connect both,

That's not how RADIUS works.

but now just first server work and if second server send any user for authentication, it will receive fail, cause radius check user2 for server 1 but user2 is for server2,

hope you understand correctly, its important for me, please help me.

If it's important, you should be able to explain it in detail. From what I can understand, what you want is impossible. RADIUS doesn't work like that. Alan DeKok.

On Mon, Apr 20, 2015 at 7:48 PM, ademaiasantos@gmail.com <ademaiasantos@gmail.com> wrote:

for example first server send user1 and second server send user2, i want they connect both,

Like Alan said, radius does not work like that. One way to solve your problem would probably be using pam-script: http://manpages.ubuntu.com/manpages/trusty/man7/pam-script.7.html https://github.com/jeroennijhof/pam_script/blob/master/etc/README.examples Basically it passes some environment variable, including PAM_USER and PAM_AUTHTOK (which contains the password). You can CREATE a script that acts on those input and do whatever-you-want with it. When setup correctly, a user will be able to login when the script returns zero error code, and will be rejected if the script returns non-zero error code. The script can use any programming languange you want (e.g. bash, perl, php, whatever) as long as it is executable, can read environment variables, and can return return-code of your choice. More details of pam-script is beyond the scope of this list, and if you have problems you might have better luck contacting the author. There are other ways, of course, but pam-script would probably be the simplest one. -- Fajar