Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

This question already has an answer here:

I am able to authenticate radius users using radius server+pam+ssh with creating local user with blank password in linux.

Is it possible to authenticate radius users without creating users in local machine with blank password?

/etc/pam.d/ssh file as below

auth    sufficient debug
auth    sufficient use_first_pass
auth    required                
account sufficient 
account required    
session required
share|improve this question

marked as duplicate by Andrew B, mdpc, Ward, Falcon Momot, TheCleaner Jan 29 '14 at 14:16

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

The radius protocol is only designed for authentication and doesn't provide the POSIX account attributes needed for users to be able to use your systems, e.g. UID and GID numbers, a default shell, and home directory.

share|improve this answer
So,what will be the solution if I do not want to create user in local system – user3184706 Jan 16 '14 at 8:35
Store your user accounts in central database designed for that purpose. Old school would be NIS, better solutions are directory servers using LDAP, OpenLDAP, 389 Directory Server, MS Active Directory possibly securing the authentication with Kerberos. Free IPA comes to mind as well. But PAM modules also can use MySQL and Postgres SQL back-ends. Common would be to use pam_mkhomedir to have a home directory created at first login if those aren't stored on a central NFS server and mounted on demand with the automounter. – HBruijn Jan 16 '14 at 8:47

Not the answer you're looking for? Browse other questions tagged or ask your own question.