NPS和RHEL的sshconfiguration

我们使用freeradius.org的pam_radius模块来设置windows NPS和RHEL radius client。 但在Linux客户端上，我看到了错误pam_radius_auth: Got RADIUS response code 3在/var/log/secure pam_radius_auth: Got RADIUS response code 3 。 代码3意味着Access Rejected ，但从Windows客户端，当我使用半径testing工具进行testing时，连接成功并获得代码2，代码2意味着Access granted 。 在NPS日志中，我得到如下：

 <Event> <Timestamp data_type="4">07/04/2015 10:21:02.913</Timestamp> <Computer-Name data_type="1">MYADDomainController</Computer-Name> <Event-Source data_type="1">IAS</Event-Source> <User-Name data_type="1">MYlinuxuser</User-Name> <NAS-Identifier data_type="1">sshd</NAS-Identifier> <NAS-Port data_type="0">3360</NAS-Port> <NAS-Port-Type data_type="0">5</NAS-Port-Type> <Service-Type data_type="0">8</Service-Type> <Calling-Station-Id data_type="1">MYWindowsClientIP</Calling-Station-Id> <Client-IP-Address data_type="3">MYMyLinuxRadiusClientNameInNPSIP</Client-IP-Address> <Client-Vendor data_type="0">0</Client-Vendor> <Client-Friendly-Name data_type="1">MyLinuxRadiusClientNameInNPS</Client-Friendly-Name> <Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name> <Provider-Type data_type="0">1</Provider-Type> <SAM-Account-Name data_type="1">MyDomainName\MYlinuxuser</SAM-Account-Name> <Fully-Qualifed-User-Name data_type="1">MyDomainName\MYlinuxuser</Fully-Qualifed-User-Name> <Class data_type="1">311 1 MyRadiusServer 07/04/2015 05:14:52 15</Class> <Authentication-Type data_type="0">1</Authentication-Type> <Packet-Type data_type="0">1</Packet-Type> <Reason-Code data_type="0">0</Reason-Code> </Event> <Event> <Timestamp data_type="4">07/04/2015 10:21:02.913</Timestamp> <Computer-Name data_type="1">MYADDomainController</Computer-Name> <Event-Source data_type="1">IAS</Event-Source> <Class data_type="1">311 1 MyRadiusServer 07/04/2015 05:14:52 15</Class> <Authentication-Type data_type="0">1</Authentication-Type> <Fully-Qualifed-User-Name data_type="1">MyDomainName\MYlinuxuser</Fully-Qualifed-User-Name> <SAM-Account-Name data_type="1">MyDomainName\MYlinuxuser</SAM-Account-Name> <Provider-Type data_type="0">1</Provider-Type> <Proxy-Policy-Name data_type="1">Use Windows authentication for all users</Proxy-Policy-Name> <Client-IP-Address data_type="3">MYMyLinuxRadiusClientNameInNPSIP</Client-IP-Address> <Client-Vendor data_type="0">0</Client-Vendor> <Client-Friendly-Name data_type="1">MyLinuxRadiusClientNameInNPS</Client-Friendly-Name> <Packet-Type data_type="0">3</Packet-Type> <Reason-Code data_type="0">16</Reason-Code> </Event> 

在NPS的Windows事件查看器中，我没有看到任何错误。 我在NPS中错过了什么？