OTP support - OATH compliant 2FA with freeradius

Alan DeKok aland at deployingradius.com
Tue Oct 31 20:31:52 UTC 2023


On Oct 31, 2023, at 4:21 PM, Michael Hawkins <mhawkins.consultant at gmail.com> wrote:
> Way back when, freeradius supported otp. Has that support been removed?

  3.0 supported some weird SMS OTP thing.  It depended on an external tool which has since disappeared.  So we removed that functionality from 3.2.
 
> What is it replaced with? Or, to put it another way. If I wanted to use
> some form of 2FA that used a server that was code running on a LINUX
> box, that was open source, that worked with freeradius, what might it
> be? The 2FA piece would support OATH compliant event (not time based)
> tokens - hardware or software.

  In 3.2: rlm_totp

  It uses time-based OTP, like Google Authenticator, etc.

  Alan DeKok.



More information about the Freeradius-Users mailing list