multiotp and freeradius - Where to set Auth-Type for multiotp?
Program returned code (0) and output '' (0) multiotp : Program executed successfully (0) [multiotp] = ok (0) WARNING: pap : No "known good" password found for the user. Not setting Auth-Type (0) WARNING: pap : Authentication will fail unless a "known good" password is available (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user
This is the step that I need help with in the multiotp configuration. There is no policy.conf file! 4) In the configuration file called "policy.conf" in etc/raddb/ a) Add the multiOTP(r) authorization policy # # Handle multiOTP(r) (http://www.multiotp.net/) authorization policy. # This must be add just before the last "}" multiotp.authorize { if (!control:Auth-Type) { update control { Auth-Type := multiotp } } } -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+peter.skrebetz=netscout.com@lists.freeradius.org] On Behalf Of Skrebetz, Pete Sent: Thursday, October 6, 2016 1:13 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: multiotp and freeradius - Where to set Auth-Type for multiotp? Program returned code (0) and output '' (0) multiotp : Program executed successfully (0) [multiotp] = ok (0) WARNING: pap : No "known good" password found for the user. Not setting Auth-Type (0) WARNING: pap : Authentication will fail unless a "known good" password is available (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user - List info/subscribe/unsubscribe? See https://urldefense.proofpoint.com/v2/url?u=http-3A__www.freeradius.org_list_...
Hi,
This is the step that I need help with in the multiotp configuration. There is no policy.conf file! in v2.x there was, in v3 you just need to create a new file in the policy.d/ directory....eg multiOTP and put that in there,....then you call that policy in relevant section (authorize) bu just using 'multiotp'
alan
So I created a multiotp file in the /etc/raddb/policy.d/ directory, pasted in the below entry, restarted radiusd and it works!! # # Handle multiOTP authorization policy. # This must be add just before the last "}" multiotp.authorize { if (!control:Auth-Type) { update control { Auth-Type := multiotp } } } Thanks so much for your help!!! -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+peter.skrebetz=netscout.com@lists.freeradius.org] On Behalf Of A.L.M.Buxey@lboro.ac.uk Sent: Thursday, October 6, 2016 1:48 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: multiotp and freeradius - Where to set Auth-Type for multiotp? Hi,
This is the step that I need help with in the multiotp configuration. There is no policy.conf file! in v2.x there was, in v3 you just need to create a new file in the policy.d/ directory....eg multiOTP and put that in there,....then you call that policy in relevant section (authorize) bu just using 'multiotp'
alan - List info/subscribe/unsubscribe? See https://urldefense.proofpoint.com/v2/url?u=http-3A__www.freeradius.org_list_...
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Skrebetz, Pete