PAM_RADIUS_AUTH.so refuses to work on some machines
Hi I have installed pam_radius_auth to work on Redhat 7.3 and it seems to work fine. I then installed (compiled) it on a Redhat 9 box and it seems to be behaving quite strange. My pam.d/sshd file looks like this #%PAM-1.0 auth sufficient pam_radius_auth.so debug auth required pam_stack.so service=system-auth auth required pam_nologin.so account required pam_stack.so service=system-auth password required pam_stack.so service=system-auth session sufficient pam_radius_auth.so debug session required pam_stack.so service=system-auth session required pam_limits.so session optional pam_console.so The session (accounting) part of pam_radius_auth seems to work fine. I can see packets going to the radius server when I do a tcpdump on the client machine. This only works when I hash out the first line "auth sufficient pam_radius_auth.so debug". When the first line is not hasshed the authentication kicks in and nothing happens when I enter a username and password. I set tcpdump to sniff for all packets going to the radius server but there is nothing. My logs look like this. Jun 20 17:12:01 finpapp01 sshd[6881]: pam_radius_auth: Got user name root Jun 20 17:12:23 finpapp01 sshd[6887]: pam_radius_auth: Got user name test Jun 20 17:14:00 finpapp01 sshd[7161]: pam_radius_auth: Got user name test Jun 20 17:18:14 finpapp01 sshd[7673]: Failed password for test from 172.31.1.101 port 2276 Jun 20 17:18:45 finpapp01 sshd[7780]: Accepted password for root from 172.31.1.101 port 2277 Jun 20 17:18:45 finpapp01 sshd[7780]: pam_radius_auth: DEBUG: getservbyname(radacct, udp) returned 1108551052. Jun 20 17:18:48 finpapp01 sshd[7780]: pam_radius_auth: RADIUS server 172.31.10.1 failed to respond Jun 20 17:18:48 finpapp01 sshd[7780]: pam_radius_auth: All RADIUS servers failed to respond. Jun 20 17:22:26 finpapp01 sshd[8216]: pam_radius_auth: Got user name test Jun 20 17:24:50 finpapp01 sshd[8541]: pam_radius_auth: Got user name root Jun 20 17:28:40 finpapp01 sshd[8978]: Accepted password for root from 172.31.1.120 port 1916 ssh2 When I try and log into the box, the only info that pam_radius_auth give to the log is the "Got user name xxxx" message. What would the right syntax be for a strace command to trace this? So far I have recompiled, copy bin from other machines but nothing seems to work. Kind Regarsd Christiaan Ehlers
participants (1)
-
Christiaan Ehlers