I have a problem with the PAM Radius module. Actually, I have it installed already under CentOS. I've inserted the line:

auth  required /lib/security/pam_radius_auth.so  

in /etc/pam.d/sshd and commented out the line:

@include common-auth.   

After that, I've edited the file /etc/raddb/server and entered the radius server's IP and restarted the ssh service.

Now, I enter the username and the OTP (One-Time Password), it's accepted just as expected. However, when I enter the user's password, It is not accepting the user's password.

I'd like to have PAM setup so that a user can use either their password or the OTP. How can I achieve this?


I found this document which used slightly different options when configuring PAM. I'd start by trying these out. The document is titled: DualShield for PAM RADIUS Implementation Guide (Version 5.4).

  1. open the configuration file /etc/pam.d/gdm-password or /etc/pam.d/sshd, in a text editor
  2. locate the line below:

    auth substack password-auth 
  3. insert the line below:

    auth sufficient pam_radius_auth.so 


    auth sufficient pam_radius_auth.so 
    auth substack password-auth
  • Thanks a lot sir..Now,I have successfully logged in with user's password as well as one time password. – Rohit Singh Sep 20 '14 at 5:16
  • 1
    @RohitSingh - that's great news, glad your issue's been resolved. You can mark this A as accepted so other's know your issue's been solved. – slm Sep 20 '14 at 6:33
  • Here is one more query that is how can I login with user's one time password after user's password on a single screen??? I hope you understand..?? let me give you a description below: – Rohit Singh Sep 20 '14 at 11:36
  • Username:rohit Password:.... OTP : .... on a single screen. – Rohit Singh Sep 20 '14 at 11:37
  • This is a new Q. Please start another one. – slm Sep 20 '14 at 14:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.