<HTML dir=ltr><HEAD><TITLE>Re: How to handle challenge response using PAM auth in FreeRadius</TITLE>
<META http-equiv=Content-Type content="text/html; charset=unicode">
<META content="MSHTML 6.00.3790.4589" name=GENERATOR></HEAD>
<BODY>
<DIV id=idOWAReplyText79532 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>pam_conv is good for holding interactive conversation locally for applications</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2>such as login, su etc.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>When used with radius server pam_conv failed to do prompt at remote_client.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2>Please note that we are not interested in local convesation where PAM is located.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>The remote client I have used is one of the test applications from the radius suite.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2>Let me aks you further.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>note: A and B are machines.</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<DIV dir=ltr><FONT face=Arial size=2>{client @ A} ---> {radius at B} --> {PAM @ B}</FONT></DIV></DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr>Now when I tested as said above, a call to pam_conv in PAM module at machine B</DIV>
<DIV dir=ltr>did nothing. Are you sure it does prompt with a message at client @ A ?</DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr>I look forward to your reply.</DIV>
<DIV dir=ltr> </DIV>
<DIV dir=ltr>Thanks,<BR></DIV>
<DIV dir=ltr>
<HR tabIndex=-1>
</DIV>
<DIV dir=ltr><FONT face=Tahoma size=2><B>From:</B> John Dennis [mailto:jdennis@redhat.com]<BR><B>Sent:</B> Mon 3/15/2010 1:51 PM<BR><B>To:</B> Rajendra Hegde<BR><B>Cc:</B> FreeRadius users mailing list<BR><B>Subject:</B> Re: How to handle challenge response using PAM auth in FreeRadius<BR></FONT><BR></DIV>
<DIV>
<P><FONT size=2>On 03/15/2010 01:12 PM, Rajendra Hegde wrote:<BR>> Hello,<BR>> The scenario is like this :<BR>> {remote client } -----> {radius} ---> {PAM} ----> {Extern Athenticator}<BR>> Now when the external authenticator sends challenge to PAM, I do not see<BR>> a easy way to pass the "challenge text" back to the radius.<BR>> Please note that pam_sm_authenticate allows either SUCCESS or FAILURE return<BR>> but not "Challnege text" return.<BR><BR>I gave you the answer, it's done with pam_conv, you should read the code<BR>in rlm_pam.c.<BR><BR>--<BR>John Dennis <jdennis@redhat.com><BR><BR>Looking to carve out IT costs?<BR>www.redhat.com/carveoutcosts/<BR></FONT></P></DIV>The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Statements and opinions expressed in this e-mail may not represent those of the company. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender immediately and delete the material from any computer. Please see our legal details at http://www.cryptocard.com
CRYPTOCard Inc. is registered in the province of Ontario, Canada with Business number 80531 6478. CRYPTOCard Europe is limited liability company registered in England and Wales (with registered number 05728808 and VAT number 869 3979 41); its registered office is Aztec Centre, Aztec West, Almondsbury, Bristol, UK, BS32 4TD
</BODY></HTML>