SecHard

Linux Radius Integration

Run sudo apt-get install libpam-radius-auth libpam0g-dev gcc command.

Enter the file with sudo vi /etc/ssh/sshd_config.

-> ChallengeResponseAuthentication yes

-> UsePAM yes

settings are made.

Enter the file with sudo vi /etc/pam.d/sshd and

auth sufficient pam_radius_auth.so

command is written.

Enter the file with sudo vi /etc/pam_radius_auth.conf and write Radius server ip address and secret key.

-> ex: #server[:port] shared_secret timeout(s)

192.168.x.x:1645 MySecret 60

sudo mkdir /etc/raddb

sudo cp /etc/pam_radius_auth.conf /etc/raddb/server

sudo service ssh restart

 

SecHard