TOTP authentication with the TOTP module

[Alan DeKok]

On Mar 11, 2025, at 8:56 AM, IT DEB <itdebbw.p at gmail.com> wrote:
> Thanks. Sorry im absolutely new to freeradius.

  That's fine.

> Now i changed in the config to

  Why?

  You can't make random changes to the configuration, and get them to do what you want.  The PAP module checks passwords, and not TOTP.  The PAP module sets "Auth-Type := PAP", and the default configuration has the PAP module running inside of "Auth-Type = PAP.

  You don't want to change the PAP module to use TOTP.  You want to use TOTP *instead* of the PAP module.

  If all users are being authenticated using TOTP, you can just edit the "authorize" section, and add:

	update control {
		Auth-Type := TOTP
	}

  And then edit the "authentication" section, and add:

	Auth-Type TOTP {
		totp
	}

  It should then work.

  Alan DeKok.