– Setting up Radius on RHEL 5.6


I am currently dissecting a single-sign-on RPM. Contained within the RPM there is the module Based on the documentation here: and here:, the module is supposed to be referenced in /etc/pam.d/ after this line:

auth required /lib/security/

and before this line:

auth required /lib/security/

By default I see 4 files which contain, but none which reference Based on the installation documentation provided below, I can't figure out if the module line requires that the pam_unix_auth line be added to the application files so both lines are present, or if it is simply stating that if one of the lines is present it needs to be provided before or after that line. The usage of the word AND is confusing me.

Here is the confusing bit of documentation:

********************************************************************** Redhat Linux > 5.0


Copy '' to /lib/security/

In the per-application configuration (/etc/pam.d/application) add:

auth sufficient /lib/security/


auth required /lib/security/


auth required /lib/security/


auth required /lib/security/ auth
sufficient /lib/security/ auth required

If anyone has configured this, could you let me know what your experience has been and what the correct interpretation is? Thanks!

Best Answer

I think that those instructions are out of date, and mention an older PAM configuration file format. The two configuration lines in question should look like this:

auth required
auth required

i.e. instead of, and no full paths to the modules (just the actual module filename).

As an aside, it seems that the pam_unix module used to be split into different modules for each purpose:

$ ls -l pam_unix*
lrwxrwxrwx 1 root root    11 Dec 14  2010 ->
lrwxrwxrwx 1 root root    11 Dec 14  2010 ->
lrwxrwxrwx 1 root root    11 Dec 14  2010 ->
lrwxrwxrwx 1 root root    11 Dec 14  2010 ->
-rwxr-xr-x 1 root root 48824 Nov  1  2010