Hmm yes, pretty out of date way of doing things, the problem is you're explicitly forcing authentication to succeed, and calling the exec module really late...
Get rid of the files call, or just use it to set the reply message i.e. Don't use Auth-Type = Accept. See here for a guide: http://wiki.freeradius.org/multiOTP+HOWTO If you're using FR 2.1.11 just remove '${policy.multiotp_prefix}' from regexp in the authorize section If you're using a version lower than FR 2.1.11, please upgrade. -Arran Arran Cudbard-Bell [email protected] RADIUS - Half the complexity of Diameter - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

