Hi I'm trying to develop a two-factor-authentication with freeradius (if there isn't something compareable). For this I want to use first pap-authentication from freeradius. After that I want radius to ask for a second password and call a script which is sending a otp over an sms-gateway to the users phone. You can imagine the second factor as kind of mobile TAN. The sms-gateway works so far and isn't part of my question. I've found nothing like this in any howto or tutorial so far, instead of eap. Any ideas how to get it to work? Is the part the radius ask for second questions possible with a request-challenge or is ist something completly different? Where could I get further information about syntax used in users-file and client.conf -file to include scripts? Is the way over the files above a possible solution or should I use pam-files? Any ideas where to get more information? any kind of hinds are welcome MM