2-factor-authentication with freeradius

Alan DeKok aland at deployingradius.com
Tue Jan 25 11:54:08 CET 2011


Marius.Meisner wrote:
> I'm trying to develop a two-factor-authentication with freeradius (if
> there isn't something compareable).

  src/modules/rlm_otp

> For this I want to use first
> pap-authentication from freeradius. After that I want radius to ask for
> a second password and call a script which is sending a otp over an
> sms-gateway to the users phone. You can imagine the second factor as
> kind of mobile TAN. The sms-gateway works so far and isn't part of my
> question. I've found nothing like this in any howto or tutorial so far,
> instead of eap.

  src/modules/rlm_example.  It does *exactly* this.

> Where could I get further information about syntax used in users-file
> and client.conf -file to include scripts?

  The documentation?

> Is the way over the files above a possible solution or should I use
> pam-files?

  No idea.

  Alan DeKok.




More information about the Freeradius-Users mailing list