Exercising Challenge/Response code path in pam client?
aland at deployingradius.com
Sat Sep 24 02:46:28 CEST 2016
On Sep 23, 2016, at 3:40 PM, Richard Perrin <rcp at sentientmeat.ca> wrote:
> When I add in a State value, that config successfully gets a challenge
> and response from the pam module on Linux (libpam-radius-auth-1.3.17).
> Surprisingly, it didn't prompt there though. Largely this highlights,
> much like you said, that I don't sufficiently understand how
> challenge-response works in RADIUS.
Then I suggest you shouldn't try to implement your own challenge-response.
> Which of the existing methods would you select for least friction in
You can't just pick something and implement it. You need *reasons* to implement challenge-response. If you don't have reasons, you don't need it.
More information about the Freeradius-Users