124a125,128
>     } else if (!strcmp(*argv, "always_prompt")) {
>       ctrl |= PAM_ALWAYS_PROMPT;
>       DPRINT(LOG_DEBUG, "DEBUG: Got always_prompt option");
> 
1134,1136c1138,1149
<   /* grab the password (if any) from the previous authentication layer */
<   retval = pam_get_item(pamh, PAM_AUTHTOK, (CONST void **) &password);
<   PAM_FAIL_CHECK;
---
>   /* if always_propmpt is specified grab the passcode from the user */
>   if ((ctrl & PAM_ALWAYS_PROMPT)) {
>       DPRINT(LOG_DEBUG, "Should prompt for the passcode now...");
>       retval = rad_converse(pamh, PAM_PROMPT_ECHO_OFF, "WiKID Passcode: ", &password);
>       password = strdup(password);
>       DPRINT(LOG_DEBUG, "Got passcode %s", password);
>       PAM_FAIL_CHECK;
>   } else {
>     /* grab the password (if any) from the previous authentication layer */
>     retval = pam_get_item(pamh, PAM_AUTHTOK, (CONST void **) &password);
>     PAM_FAIL_CHECK;
>   }
1149c1162
<     
---
> 
1154d1166
<