Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • Change auth [success=1 default=ignore] pam_access.so to auth success pam_access.so. Commented Aug 26, 2017 at 8:49
  • Thanks but that seems not to be it Both ask for the verification code but then fail. Could I check what your thoughts were on that please? I'll have a further look into that area in the meantime Commented Aug 26, 2017 at 16:47
  • Tried auth success=1 pam access.so accessfile=/etc/security/access-local.conf as well Externally asks for code but fails (access denied). Internally just fails straight away Am I right in what this line is doing... check the IP against the access file and then skip 'success=n' lines. If so that difference in the behaviour of internal and external seems to suggest it's recognising that it's on the internal network, just that it doesn't have enough authorisation methods to satisfy the login conditions (guess??) I'm not sure why it makes the external fails now though? Commented Aug 26, 2017 at 17:11