topic Re: SSHD and HP-UX PAM RADIUS issue in Operating System - HP-UX

SSHD and HP-UX PAM RADIUS issue

gobhp — Mon, 07 Jun 2010 18:20:01 GMT

Hi,

I'm trying to configure an HP-UX 11i v3 server to authenticate users with a RADIUS server through PAM. The RADIUS server is up and running and working properly. However, I'm having issues with my client. I configured PAM on it to use the HP-UX PAM RADIUS module for different applications such as su, login and sshd. All applications work properly, except sshd. When a user tries to authenticate through ssh, I get the following errors:

pam_radius_auth: Error sending RADIUS packet to server aaa.bbb.ccc.ddd:1812: Error 0

(0 appears to be the value returned by the sendto method called at line 1209 of pam_radius_auth.c)

I did a tcpdump to see if packets were being sent over the network. When authenticating through ssh, no packets at all are sent over the network. When I authenticate through any other app, I can see a normal RADIUS exchange between the HP-UX server and the RADIUS server.

What could be causing this error to happen when using ssh and not the other applications? The error code returned is not very descriptive, so any input might help!

Thanks.

Re: SSHD and HP-UX PAM RADIUS issue

Horia Chirculescu — Tue, 08 Jun 2010 04:58:40 GMT

Hello,

Maybe you could check the version of your sshd daemon and install a new version.

Read the Changelog file of the latest sshd version.

Best regards,
Horia.

Re: SSHD and HP-UX PAM RADIUS issue

gobhp — Tue, 08 Jun 2010 11:33:34 GMT

Hi,

I updated to the most recent version of sshd, but unfortunately, it did not resolve the issue. Still, thanks for the suggestion!

Re: SSHD and HP-UX PAM RADIUS issue

F Verschuren — Mon, 14 Jun 2010 07:44:51 GMT

Iam fasing simmular problems when conecting whit telnet it works fine but using ssh there is no interation whit the redius server, dit you already fount a solution for this problem?

Re: SSHD and HP-UX PAM RADIUS issue

gobhp — Mon, 14 Jun 2010 11:56:07 GMT

No, the problem hasn't been resolved yet. A case has been opened with HP. I'll let you know once I have a solution.

Re: SSHD and HP-UX PAM RADIUS issue

AlAwami — Wed, 16 Jun 2010 05:35:26 GMT

Hi,

I have the same issue.

Please let us know the solution when you get it.

Thanks

Re: SSHD and HP-UX PAM RADIUS issue

gobhp — Wed, 16 Jun 2010 13:00:00 GMT

I was using IP adresses in my /etc/raddb/server file. A workaround is to use the FQDN of the RADIUS servers. This solved the problem for me.

It appears this may be a bug in the 64-bit version of the libpam_radius.so.1 shared object.

Re: SSHD and HP-UX PAM RADIUS issue

F Verschuren — Wed, 16 Jun 2010 13:45:16 GMT

This was also the solution for me.

Tankts.

Ps a other sugestion that I got was to recompile ssh so it will go directly to raduis (whitout using pam). But I think this is a match better solution du to ssh upgrades in the future...

Re: SSHD and HP-UX PAM RADIUS issue

gobhp — Tue, 29 Jun 2010 15:02:48 GMT

A FQDN should be used to define the RADIUS server in the /etc/raddb/server file. Using an IP address caused the issue.