help-gnu-radius
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Help-gnu-radius] Authenticate with PAM (no LDAP) (REPOST)


From: Greg G
Subject: [Help-gnu-radius] Authenticate with PAM (no LDAP) (REPOST)
Date: Wed, 03 Mar 2004 16:49:07 -0500
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)


It looks like the problem isn't with LDAP after all. It seems that RADIUS isn't dealing with the results from PAM correctly. I made the following changes to my pam.conf file:

radius  auth            required        pam_unix_auth.so.1
radius  account         required        pam_unix_auth.so.1

Here's my users file:

DEFAULT         Auth-Type = Pam,
                      Pam-Auth = radius
#                       Simultaneous-Use = 1
            Service-Type = Framed-User,
                   Framed-Protocol = PPP

And now, here's what's in the radius.log:
Mar 02 13:58:13 Auth.debug: auth.c:292:rad_check_password: auth_type=253, userpass=test, name=ggersh, password=NONE
Mar 02 13:58:13 Auth.debug: auth.c:305:rad_check_password:   auth: Pam
Mar 02 13:58:13 Auth.debug: pam.c:120:pam_pass: username [ggersh], pamauth [radius]
Mar 02 13:58:13 Auth.debug: pam.c:125:pam_pass: pam_start: 0
Mar 02 13:58:13 Auth.debug: pam.c:130:pam_pass: pam_authenticate: 9
Mar 02 13:58:13 Auth.debug: pam.c:138:pam_pass: pam_acct_mgmt: 9
Mar 02 13:58:13 Auth.notice: (Access-Request local 73 "ggersh"): Login incorrect [ggersh/test]
Mar 02 13:58:13 Auth.debug: auth.c:911:sfn_validate: 1 -> 15
Mar 02 13:58:13 Auth.debug: auth.c:1197:sfn_reject_cleanup: 15 -> 14
Mar 02 13:58:13 Auth.debug: auth.c:1203:sfn_reject: REJECT: ggersh

I know the password is correct, as I just set it. Any idea what I'm doing wrong here?

Thanks.

As an aside, the docs call for "Auth-Type = PAM" (with the PAM in all caps) 
which isn't correct.

-Greg G








reply via email to

[Prev in Thread] Current Thread [Next in Thread]