2016-03-09 20:26 GMT+01:00 Arran Cudbard-Bell <a.cudbardb@freeradius.org>: ...
The session-state list makes this much easier in v3.0.x.
It handles creating a State attribute in the response, to tie together multiple rounds of authentication.
You still need cooperation from the NAS though, to prompt the user multiple times when it receives an Access-Challenge.
For EAP, multi-factor authentication is not possible, unless the two factors
are presented in a single round e.g. otp + password.
The two factors will be presented in a single round, indeed.
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html