Open ThomasHabets opened 7 years ago
From @tecman77 on March 6, 2015 19:32
I have similar problem with Freeradius and pam_google_authenticator module. I tried to deploy this on Redhat 6, 7, Fedora 21 without success. Time on server is configured correctly and I am able to log in with two-factor-auth via SSH on the very same server, however FreeRadius doesn't seem to work on these systems. The only system I am able to make it work is Ubuntu so far without any problems. I followed same setup guide as OP.
My pam_google_authenticator was compiled instead of installed from rpm but freeradius - from rpm. Redhat 7 comes with Freeradius 3.x by default, Ubuntu 2.1. I also compiled freeradius from sources on both systems, and that didn't make any difference. Ubuntu works, Centos/Redhat/Fedora - doesn't with FreeRadius, but SSHD works fine with dual factor authentication.
There is not enough debug options that I could use to troubleshoot it further myself.
From @pantsman0 on October 3, 2015 11:50
I have set this up on RHEL6&7 and CentOS6&7, and I've had it work using the steps in the guide above.
The problem seems to be this line:
Thu Sep 26 16:38:19 2013 : Debug: pam_pass: function pam_authenticate FAILED for <test>. Reason: Cannot make/remove an entry for the specified session
This happens to me when I forget to change the running user/group from radiusd to running as root. You need to run it as root, or move the secrets out of user home directories.
If you continue to have issues, comment here and I will respond when I can.
From @ThomasHabets on October 10, 2014 8:7
Original issue 326 created by achintha85 on 2013-09-26T06:52:57.000Z:
Hi I've been following this article to setup FreeRADIUS Google Dual Factor Authenticator
http://www.supertechguy.com/help/security/freeradius-google-auth
Hours of testing I still can't get it to work. If my /etc/pam.d/radiusd looks like the following it works well with the following command
radtest test test localhost 18120 testing123
Copied from original issue: google/google-authenticator#325