topic Re: Problem with Radius authentication in Operating System - HP-UX

Problem with Radius authentication

Ivan P. — Wed, 23 Jan 2008 10:44:47 GMT

Hi all,

On my HP-UX 11.23 box I had a problem with Radius authentication. To use the HP server as Radius client I downloaded, compiled and installed the PAM Radius module provided by FreeRADIUS.

As Radius server I use the package provided by HP installed on another server,

After modifing the /etc/pam.conf file I'm able to use Radius authentication for telnet; on the Radius Server I'm able to sniff the Radius packages (Request and Accept).

The problem is when I try to do a XDMCP session with a X emulator (Exceed) using the dtlogin service. In this case I receive the message "Login incorrect" and on the syslog file I can read "can not open module /lib/security/pam_radius_auth.so.1"

The pam.conf file is attacched.

The pam_radius_auth.so.1 is a link:

pam_radius_auth.so.1 => /opt/Free_Radius/lib/pam_radius_auth.so

The link permission is 755

The file permisssion is 555

Best Regards

Ivan

Re: Problem with Radius authentication

Steven E. Protter — Wed, 23 Jan 2008 11:21:05 GMT

Shalom,

There must be more than this in /var/adm/syslog/syslog.log

inetd -l

To enhance logging of telnet and other login.

I've checked and can not find a radius depot based install for HP-UX. You should check a recent application cd/dvd.

SEP

Re: Problem with Radius authentication

Ivan P. — Wed, 23 Jan 2008 11:34:26 GMT

Hi,

The syslog file show always the same message:

"syslog: modules: can not open module /lib/security/pam_radius_auth.so.1"

BR

Ivan

Re: Problem with Radius authentication

Ivan P. — Wed, 23 Jan 2008 12:14:23 GMT

I solved the problem, was the CDE environment, I dont know wy but the CDE is not able to handling in the correct way my pam.conf file with my PAM module.
Then I installed and configures GNOME and adding on the pam.conf file two rows reading:

OTHER auth sufficient /lib/security/pam_radius_auth.so.1
OTHER auth required libpam_unix_so.1 try_first_pass

Now I'm able with GNOME to execute the authentication process via Radius :-)

//Ivan