AIX client to MS RADIUS server

[Lloyd Gill]

I have debug mode set. I get an odd message in my auth logs show my account expired, but it is not. For some reason, when I test with 2-factor, my account gets hosed up and the authentication team has to keep deleting my token then re-initializing for me to test. Here is that snippet in the logs:


auth|security:err|error sshd[4194410]: error: PAM: User account has expired

I’m also seeing these:


auth|security:err|error sshd[5308746]: pam_radius_auth: Failed looking up IP address for RADIUS server

Lloyd


From: Arran Cudbard-Bell <a.cudbardb at freeradius.org<mailto:a.cudbardb at freeradius.org>>
Reply-To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org<mailto:freeradius-users at lists.freeradius.org>>
Date: Friday, March 28, 2014 at 2:25 PM
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org<mailto:freeradius-users at lists.freeradius.org>>
Subject: Re: AIX client to MS RADIUS server


On 28 Mar 2014, at 18:13, Alan DeKok <aland at deployingradius.com<mailto:aland at deployingradius.com>> wrote:

Lloyd Gill wrote:
Here is my output of the build. Not clean, but it starts to
authenticate, but logs me out. Anyone have an idea on why the build
produced this?
  They are warnings, not errors.  Ignore them.

There does appear to be a "debug" config variable.

https://github.com/FreeRADIUS/pam_radius/blob/master/src/pam_radius_auth.c#L139

Set it to any value and you should see some extra debugging messages in the pam logs.

Arran Cudbard-Bell <a.cudbardb at freeradius.org<mailto:a.cudbardb at freeradius.org>>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/mailman/private/freeradius-users/attachments/20140328/fb6b7f80/attachment.html>