Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

This question already has an answer here:

I am able to authenticate radius users using radius server+pam+ssh with creating local user with blank password in linux.

Is it possible to authenticate radius users without creating users in local machine with blank password?

/etc/pam.d/ssh file as below

#%PAM-1.0
auth    sufficient      pam_radius_auth.so debug
auth    sufficient      pam_unix.so use_first_pass
auth    required        pam_auth_status.so                
account sufficient      pam_unix.so 
account required        pam_auth_status.so    
session required        pam_unix.so
share|improve this question

marked as duplicate by Andrew B, mdpc, Ward, Falcon Momot, TheCleaner Jan 29 at 14:16

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

The radius protocol is only designed for authentication and doesn't provide the POSIX account attributes needed for users to be able to use your systems, e.g. UID and GID numbers, a default shell, and home directory.

share|improve this answer
    
So,what will be the solution if I do not want to create user in local system –  user3184706 Jan 16 at 8:35
    
Store your user accounts in central database designed for that purpose. Old school would be NIS, better solutions are directory servers using LDAP, OpenLDAP, 389 Directory Server, MS Active Directory possibly securing the authentication with Kerberos. Free IPA comes to mind as well. But PAM modules also can use MySQL and Postgres SQL back-ends. Common would be to use pam_mkhomedir to have a home directory created at first login if those aren't stored on a central NFS server and mounted on demand with the automounter. –  HBruijn Jan 16 at 8:47

Not the answer you're looking for? Browse other questions tagged or ask your own question.