Radius as authentication mechanism?

[Mark Tunnell]

Can HP-UX be configured to use a Radius server for SSH authentication? I see lots of info on setting up the AAA Radius server. I already have a Radius server. I hoping to authenticate login attempts to my HP-UX server via Radius. Is this possible?

[Dave Binder_1]

Normally this will be handled by a pam library (PAM_RADIUS) that acts as a RADIUS client. Note that RADIUS carries multiple authentication methods, so you also need to ensure that the authentication method you are using on your RADIUS server is also supported by your PAM_RADIUS. At this point there is not a PAM_RADIUS library included with HP-UX. There is an open source pam_radius: http://www.freeradius.org/pam_radius_auth/. Last time I played with it, it took some minor tweaking to get it running on HP-UX.

I would also suggest contacting the HP-UX AAA team directly at aaainfo@cup.hp.com to see if they have something in progress, especially if you are interested in a beta version.