hi,I installed libpam-radius-auth on ubuntu 18.04 to test gluu-raduis.
The configuration i did:
/etc/pam_radius_auth.conf
```
gluuServerIP secret timout
```
Is the value of secret the value of the gluu console radius clents secret?
/etc/ssh/sshd_config
```
ChallengeResponseAuthentication yes
UsePAM yes
```
/etc/pam.d/sshd
```
auth sufficient pam_radius_auth.so
```
the gluu-radius log file: /opt/gluu/radius/logs/gluu-radius.log
```
[DEBUG] 2022-03-15 10:42:18.505 [Radius Auth Listener] SuperGluuAuthClient - SuperGluu initial auth failed. Response: {
"error_description": "Client authentication failed (e.g. unknown client, no client authentication included, or unsupported authentication method). The authorization server MAY return an HTTP 401 (Unauthorized) status code to indicate which HTTP authentication schemes are supported. If the client attempted to authenticate via the Authorization request header field, the authorization server MUST respond with an HTTP 401 (Unauthorized) status code, and include the WWW-Authenticate response header field matching the authentication scheme used by the client.",
"error": "invalid_client"
}
```
/opt/gluu/jetty/oxauth/logs/2022_03_15.jetty.log
```
INFO [qtp2085002312-14] [org.gluu.oxauth.auth.Authenticator] (Authenticator.java:278) - Authentication success for Client: '1701.f04365b1-a7df-4981-9afd-73dd04d3d3be'
2022-03-15 10:33:48,823 ERROR [qtp2085002312-14] [org.gluu.oxauth.service.AuthenticationService] (AuthenticationService.java:465) - Failed to authenticate DN: CN=??,OU=AADDC Users,DC=ad,DC=yogorobot,DC=cloud
org.gluu.persist.exception.AuthenticationException: Failed to authenticate DN: CN=??,OU=AADDC Users,DC=ad,DC=yogorobot,DC=cloud
at org.gluu.persist.ldap.impl.LdapEntryManager.authenticate(LdapEntryManager.java:747) ~[gluu-orm-ldap-4.3.1.Final.jar:?]
at org.gluu.oxauth.service.AuthenticationService.authenticateImpl(AuthenticationService.java:438) ~[classes/:?]
Caused by: com.unboundid.ldap.sdk.LDAPException: Simple bind operations are not allowed to contain a bind DN without a password.
```