openssh with radius server unreachable
Pascal Henri
pascal.henri at alcatel.fr
Fri Nov 10 00:21:15 EST 2006
Hello,
I think to have find a small pb with openssh when a Radius server is
unreachable.
I use radius authentication with pam my system-auth is the following
auth [success=done auth_err=die default=ignore]
/lib/security/pam_radius_auth.so try_first_pass debug
auth [success=ignore auth_err=ignore default=ignore] pam_nologin.so
file=/etc/raddb/radiusfailure
auth required /lib/security/pam_unix.so likeauth nullok md5
shadow
auth required /lib/security/pam_tally.so deny=2 per_user
no_magic_root even_deny_root_account
account required /lib/security/pam_unix.so
account required /lib/security/pam_tally.so reset no_magic_root
password required /lib/security/pam_cracklib.so retry=3
password sufficient /lib/security/pam_unix.so nullok use_authtok
md5 shadow
password required /lib/security/pam_deny.so
session required /lib/security/pam_unix.so
when radius server is unreachable, we display contents of file
radiusfailure "RADIUS servers are unreachable, need local password.".
with telnet this contents is display on client between each
authentication try but not when i use ssh client.
With ssh, i have the following sequence
debug1: Doing password authentication.
pascal at clin5207's password:
Permission denied, please try again.
pascal at clin5207's password:
Permission denied, please try again.
pascal at clin5207's password:
Permission denied.
I have no indication that radius server is not reachable. Is it
possible to fix the problem ?
--
-------------------------
Pascal h.
Bureau C2080, colombes
where is the hammer
-------------------------
More information about the openssh-unix-dev
mailing list