pam_radius module: How to reject authentication immediately when RADIUS fails?

[Alan DeKok]

On Feb 23, 2022, at 8:57 AM, Ole Holm Nielsen <Ole.H.Nielsen at fysik.dtu.dk> wrote:
> 
> I already tried "requisite" instead of "sufficient".  Then I must also comment out the line:
> 
> auth       substack     password-auth
> 
> But users that fail RADIUS authentication continue to get the same 5 password questions that I'm trying to ge trid of :-(

  That's controlled by PAM, not by anything we wrote.

> Well, yes, and I know almost nothing about PAM :-(  I was hoping that someone on this list would already have figured out the correct solution for pam_radius...

  There is no solution specifically for pam_radius.  Ask the PAM people how to configure their software.

  Alan DeKok.