"Jonathan C. Detert" <[EMAIL PROTECTED]> wrote: > I've tried several minor variations of the above changes, to no avail. > Here's what 'freeradius -sfX' says:
That configuration should work. > rad_check_password: Found Auth-Type PAM > auth: type "PAM" > modcall: entering group Auth-Type for request 1 > pam_pass: using pamauth string <radiusd> for pam.conf lookup > pam_pass: function pam_authenticate FAILED for <detertj>. Reason: > Authentication failure > modcall[authenticate]: module "pam" returns reject for request 1 Ah, yes. Wondeful PAM. The errors it produces are almost always "FAIL". There's a reason I put so much effort into makeing FreeRADIUS produce such huge debugging messages: they're enormously helpful. > /var/log/auth.log sheds no further light. Ultimately, i want to use > pam_smb, but for starters, I'm currently just trying to use pam_unix. Try looking in /var/log/messages. PAM sometimes puts log data there. Other than that, I'd suggest checking that the Access-Requests are using PAP, and nothing else. If they are, then it's a PAM problem, and I'd suggest asking on a PAM list. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
