FreeRadius EAP-GTC mode
Hello, We are trying to configure our FreeRadius environment to work with EAP-GTC (2 factor authentication): 1) When configuring working in proxy mode - the client (Netmotion 10.11) does not pop second authentication login screen ("password:"). Can you tell why or what should we configure differently in order to make it work? 2) The pratical configuration we are trying to get is - first authentication will be against AD and the second one (response to Access_Challenge) against forwarded Radius Authentication server. How can this be configured? Regards, Yariv Levavi SafeNet's Integration Team The information contained in this electronic mail transmission may be privileged and confidential, and therefore, protected from disclosure. If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it.
Levavi, Yariv wrote:
We are trying to configure our FreeRadius environment to work with EAP-GTC (2 factor authentication):
1) When configuring working in proxy mode – the client (Netmotion 10.11) does not pop second authentication login screen (“password:”). Can you tell why or what should we configure differently in order to make it work?
Ask Netmotion how their systems work. I don't see why proxying would make any difference.
2) The pratical configuration we are trying to get is – first authentication will be against AD and the second one (response to Access_Challenge) against forwarded Radius Authentication server. How can this be configured?
I'm not sure what you're doing. As always, look at the debug output. If you can read it and tell the difference between step 1 and step 2, then you can write "unlang" policies to key off of those differences. As with anything RADIUS, almost *everything* is in the RADIUS packets. If it's not in the RADIUS packet, it pretty much doesn't exist. Maybe sometimes you can put information into a database, but you've got to manage that yourself. Alan DeKok.
participants (2)
-
Alan DeKok -
Levavi, Yariv