Exercising Challenge/Response code path in pam client?

[Alan DeKok]

On Sep 23, 2016, at 3:40 PM, Richard Perrin <rcp at sentientmeat.ca> wrote:
> When I add in a State value, that config successfully gets a challenge
> and response from the pam module on Linux (libpam-radius-auth-1.3.17).
> Surprisingly, it didn't prompt there though. Largely this highlights,
> much like you said, that I don't sufficiently understand how
> challenge-response works in RADIUS.

  Then I suggest you shouldn't try to implement your own challenge-response.

> Which of the existing methods would you select for least friction in
> configuring?

  You can't just pick something and implement it.  You need *reasons* to implement challenge-response.  If you don't have reasons, you don't need it.

  Alan DeKok.