pam_radius and Cisco ACS

[Alan DeKok]

Tom <tjonesjr at gmail.com> wrote:
> I have compiled pam_radius and it appears to be working as intended,
> however Cisco ACS reports "External DB User Invalid or bad password"
> anytime I try to use the same credentials that properly authenticate
> with ACS's tacacs on a linux or freebsd server.  The username shows up
> properly on the ACS server, so I am assuming that the NAS is sending
> the proper username, but it appears that the password is not being
> sent correctly.  I know the ACS server is trying to authenticate
> against AD because after so many tries the account get's locked out.

  Is it a shared secret problem?

  Alan DeKok.