freeradius using pam_oath doesn't return otp challenge

Alan DeKok aland at
Mon Jun 17 19:30:49 CEST 2013

Martin Kraus wrote:
> Ok. However I still don't see how I would go about setting it up. I thought I can
> call only a single authentication module in freeradius. When one succeeds the
> authentication section terminates.

  There are many modules in FreeRADIUS which do challenge-response.
They all work.  Similar things can be done for oauth.

> Also the only support for oath in freeradius are the oath toolkit and google authenticator
> PAM modules.
> could you please point me in the right direction?

  You'll need to write code to get it working.  Either an oauth module,
or fixing the PAM module to support challenges.

  See the EAP module for examples of how to maintain state.

  Alan DeKok.

More information about the Freeradius-Users mailing list