124a125,127
>     } else if (!strcmp(*argv, "always_prompt")) {
>       ctrl |= PAM_ALWAYS_PROMPT;
> 
1134,1136c1137,1146
<   /* grab the password (if any) from the previous authentication layer */
<   retval = pam_get_item(pamh, PAM_AUTHTOK, (CONST void **) &password);
<   PAM_FAIL_CHECK;
---
>   /* if always_propmpt is specified grab the passcode from the user */
>   if ((ctrl & PAM_ALWAYS_PROMPT)) {
>       retval = rad_converse(pamh, PAM_PROMPT_ECHO_OFF, "WiKID Passcode: ", &password);
>       password = strdup(password);
>       PAM_FAIL_CHECK;
>   } else {
>     /* grab the password (if any) from the previous authentication layer */
>     retval = pam_get_item(pamh, PAM_AUTHTOK, (CONST void **) &password);
>     PAM_FAIL_CHECK;
>   }
1149c1159
<     
---
> 
1154d1163
<