Troubleshooting: Linux SSH Prompts for Password Twice

Version Affected: All
 
 

Overview

After configuring RADIUS-based authentication using SecureAuth's Linux PAM guide, SSH prompts for credentials in the order Username, Password, second factor, Password — asking for the password a second time after the second factor.
 
 

Cause

This is caused by the /etc/pam.d/sshd configuration. Its auth include password-auth line adds a second PAM module that also asks for a password.
 
 

Resolution

1. Edit /etc/pam.d/sshd.
2. Find the line beginning auth include password-auth and comment it out by adding # to the start of the line.
3. Save the file.

After this change, SSH prompts for credentials in the order Username, Password, second factor.

Special Considerations

This was tested on CentOS 7 and 8.


 

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.