Apache2 auth_radius and OTP not working consistently
Hi, I am trying to get freeradius + AD + Yubikey as authentication mechanism for some of our websites It is working on and off which makes it very difficult to troubleshoot I noticed some notes / comments in the module but apparently I am not able to implement them properly although they seem pretty clear It will be greatly appreciated if you can point me to what am I doing wrong Example folder protected /var/www/html/test/user file needed to be used /var/www/html/test/user/index.php I put another file named index.html containing a link to index.php in the above folder I can connect to it after authenticate but , when I am using the link I created to index.php, I am asked again to authenticate which fails with "password mismatched" error I know I must be missing something really simple and I apologize for wasting your time with this but I am a bit desperate to get it working Thanks Steven
On Oct 5, 2021, at 4:55 PM, Steven Vacaroaia <stef97@gmail.com> wrote:
I am trying to get freeradius + AD + Yubikey as authentication mechanism for some of our websites
It is working on and off which makes it very difficult to troubleshoot
it's best to test these things with "radclient". That way you test the RADIUS / AD / Yubikey portion separately from the web site. TBH, most web server integration with RADIUS is pretty poor.
I noticed some notes / comments in the module but apparently I am not able to implement them properly although they seem pretty clear
Which module?
It will be greatly appreciated if you can point me to what am I doing wrong
Example folder protected /var/www/html/test/user file needed to be used /var/www/html/test/user/index.php I put another file named index.html containing a link to index.php in the above folder
That has nothing to do with FreeRADIUS. We don't ship a web server, so I have no idea how to fix anything here.
I can connect to it after authenticate but , when I am using the link I created to index.php, I am asked again to authenticate which fails with "password mismatched" error
I know I must be missing something really simple and I apologize for wasting your time with this but I am a bit desperate to get it working
Which were server are you using? Whatever web server it is, you need to consult its documentation for how to configure RADIUS authentication. Once FreeRADIUS gets a packet, we can help you. Until then, it's all web server magic that we know very little about. Alan DeKok.
Sorry... I missed the part about "Apache2", it's been a long day. If you're getting a "password mismatched" error, then run FR in debug mode to see what it returns. Check if the passwords are correct, that the shared secrets are correct, etc. I'd say "run Apache in debug mode", but it's debug mode is essentially useless. Alan DeKok.
participants (2)
-
Alan DeKok -
Steven Vacaroaia