Question on pam_radius_auth module getting INCORRECT

[Alan DeKok]

David Li wrote:
> I took out all the pam modules from my auth stack in /etc/pam/sshd
> except for pam_radius_auth. The problem didn't go away.  I am not using
> SElinux either. 

  I don't know.  PAM is... weird.  It makes RADIUS look sane and pretty.

> One interesting thing I noticed is that first login attempt always fails
> due to this problem. But the second attempt after restarting the ssh
> session then it succeeds. This makes me wonder if somehow the password
> was stored on the first try and correctly retrieved on the second try.
>  But I have no clue what happened. 

  Ask the PAM people.  I don't know much about it myself, sorry.

  Alan DeKok.