freeradius and yubikeys

Frederic Van Espen frederic.ve at gmail.com
Fri May 9 15:42:25 CEST 2014


On Fri, May 9, 2014 at 2:32 PM, Arran Cudbard-Bell
<a.cudbardb at freeradius.org> wrote:
> Oops. It's more like
>
> authorize {
> # 44 is OTP len + ID Len
> if (User-Password =~ /^(.*)([cbdefghijklnrtuv]{44})$/) {
>         update request {
>                 User-Password = "%{2}"
>         }
>         yubikey.authenticate

Perfect! That was the missing bit! Thank you sir!

It is now authenticating the yubikey OTP. Afterwards it fetches the
crypt password from ldap which is then verify using PAP in the
authenticate section.

Cheers,

Frederic


More information about the Freeradius-Users mailing list