Re: Problem with external authentication script

10 Jun 2009


      ...
exec motp {
      wait = yes
      program = "/usr/local/bin/otpverify.sh %{User-Name}
%{User-Password} %{reply:Secret} %{reply:PIN} %{reply:Offset}"
      input_pairs = request
      output_pairs = config
}
You have changed them to reply items ...
...
/etc/freeradius/users:
DEFAULT Auth-Type = Accept
         Exec-Program-Wait = "/usr/local/bin/otpverify.sh '%{User-Name}'
'%{User-Password}' '%{reply:Secret}' '%{reply:PIN}' '%{reply:Offset}'",
         Fall-Through = Yes
user1   Secret:=143a5c6fa125ac1f, PIN:=1234, Offset:=0
... but configured them as check items. Revert to original exec line and
place user entry *above* DEFAULT entry.

Ivan Kalik
Kalik Informatika ISP