2

I have a problem with the PAM Radius module. Actually, I have it installed already under CentOS. I've inserted the line:

auth  required /lib/security/pam_radius_auth.so  

in /etc/pam.d/sshd and commented out the line:

@include common-auth.   

After that, I've edited the file /etc/raddb/server and entered the radius server's IP and restarted the ssh service.

Now, I enter the username and the OTP (One-Time Password), it's accepted just as expected. However, when I enter the user's password, It is not accepting the user's password.

I'd like to have PAM setup so that a user can use either their password or the OTP. How can I achieve this?

1

I found this document which used slightly different options when configuring PAM. I'd start by trying these out. The document is titled: DualShield for PAM RADIUS Implementation Guide (Version 5.4).

excerpt
  1. open the configuration file /etc/pam.d/gdm-password or /etc/pam.d/sshd, in a text editor
  2. locate the line below:

    auth substack password-auth 
    
  3. insert the line below:

    auth sufficient pam_radius_auth.so 
    

    i.e.:

    auth sufficient pam_radius_auth.so 
    auth substack password-auth
    
5
  • Thanks a lot sir..Now,I have successfully logged in with user's password as well as one time password.
    – user79370
    Sep 20 '14 at 5:16
  • 1
    @RohitSingh - that's great news, glad your issue's been resolved. You can mark this A as accepted so other's know your issue's been solved.
    – slm
    Sep 20 '14 at 6:33
  • Here is one more query that is how can I login with user's one time password after user's password on a single screen??? I hope you understand..?? let me give you a description below:
    – user79370
    Sep 20 '14 at 11:36
  • Username:rohit Password:.... OTP : .... on a single screen.
    – user79370
    Sep 20 '14 at 11:37
  • This is a new Q. Please start another one.
    – slm
    Sep 20 '14 at 14:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy