23 Sep
2016
23 Sep
'16
8:46 p.m.
On Sep 23, 2016, at 3:40 PM, Richard Perrin <rcp@sentientmeat.ca> wrote:
When I add in a State value, that config successfully gets a challenge and response from the pam module on Linux (libpam-radius-auth-1.3.17). Surprisingly, it didn't prompt there though. Largely this highlights, much like you said, that I don't sufficiently understand how challenge-response works in RADIUS.
Then I suggest you shouldn't try to implement your own challenge-response.
Which of the existing methods would you select for least friction in configuring?
You can't just pick something and implement it. You need *reasons* to implement challenge-response. If you don't have reasons, you don't need it. Alan DeKok.