EAP-GTC & Yubikey

[Alan DeKok]

cellkites at hushmail.com wrote:
> Sorry I forgot to mention that my goal is to have the Yubikey-OTP
> attribute set in order to authenticate using both password & yubikey. If
> I set the gtc auth_type to PAP and only set "yubikey" under the
> Auth-Type PAP of my sites configuration it works however that only
> allows me to authenticate using the otp, not otp & password.

  You can do something like this:

authenticate {
	...
	Auth-Type dual {
		// yubikey
		// pap checks
		// unlang
		// etc.
	}

	...
}

  Then sent the EAP-GTC "auth_type" to "dual".

  You'll have to figure out what to put in the "dual" section.  But that
shouldn't be too difficult.

  Alan DeKok.