patch files for pam_radius - adding an 'Always Prompt' option for one-time passcodes

_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL X11Forwarding yes UseDNS no Subsystem sftp/usr/libexec/openssh/sftp-server The key change is that ChallengeResponseAuthentication is yes. Hopefully, others will find this of use. Nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 ht

patch files for pam_radius - adding an 'Always Prompt' option for one-time passcodes

cceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL X11Forwarding yes UseDNS no Subsystem       sftp    /usr/libexec/openssh/sftp-server The key change is that ChallengeResponseAuthentication is yes. Hopefully, others will find this of use. Nick -

Re: Freeradius as a PIN server?

e would greatly appreciate it: http://www.wikidsystems.com/downloads/network-clients Nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius as a PIN server?

ctor-authentication Sorry to be off-topic... nick > > -Original Message- > From: freeradius-users-bounces+rudolf.susnik=telekom...@lists.freeradius.org > [mailto:freeradius-users-bounces+rudolf.susnik=telekom...@lists.freeradius.org] > On Behalf Of Nick Owen > Sent: Tue

Re: Is Centralized SSH Public Key Authentication Possible?

requirements). You may want to use Freeradius to route the OTPs to the auth server. HTH, nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authenticating agains AD issues

> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > This may be 100% off the mark, but have tried using the AD radius plugin IAS? I have tested its support for proxying for a proof-of-concept and it was quite simple to setup. I have no production experience. nick

Re: Authenticating agains AD issues

from Freeradius. Not as a replacement of Freeradius. I do give credit to MS for their support of the standard. nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: The story of PAP, CHAP and the blank password

first half on openldap and freeradius would be exactly the same: http://www.wikidsystems.com/support/wikid-support-center/how-to/how-to-add-two-factor-authentication-to-openldap-and-freeradius/?searchterm=freeradius HTH, Nick > > Cheers, > Ken > - > List info/subscribe/unsubscr

Freeradius integration

x27;re interested in getting libraries integrated with Freeradius and there would be no licensing issues - we can do a complete opensource offering. What's the best way to get this started? What are the programming requirements? One concern is that while we have support for java, python,

Re: Freeradius integration

On Sun, Feb 1, 2009 at 12:58 PM, Alan DeKok wrote: > Nick Owen wrote: >> We're interested in getting libraries integrated with Freeradius and >> there would be no licensing issues - we can do a complete opensource >> offering. What's the best way to g

Re: freeradius with PAM authentication

ort-center/how-to/how-to-secure-ssh-with-two-factor-authentication-from-wikid/ Mostly these are based on Redhat flavors. Keep in mind that each OS has different methods of handling their /etc/pam.d/sshd settings. HTH, Nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsys

Re: OT: Implementing RSA's SecurID

y, CRICOS No. 00213J There's a yahoo group for RSA. I suggest you try there. I would think you could also try RSA itself. -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Management of temporary users

thinking that I could use freeradius with dialup_admin to quickly add and remove users from huntgroup, but it doesn't appear that huntgroups are supported in dialup_admin, or am I missing something? Any suggestions welcome. Sincerely, nick -- Nick Owen WiKID Systems, Inc. 404.962.8983

Re: Management of temporary users

On 2/7/07, Alan DeKok <[EMAIL PROTECTED]> wrote: Nick Owen wrote: > > I am looking for the best way to provision groups of users for temporary > access across multiple servers. The users would be using ssh and sudo. > They would be assigned to a group of servers, then rem

Re: FreeRadius - IIS & Outlook Web Access (OWA)

f one provider > http://www.tcpdata.com - but they're site is currently down and all my calls > & emails have gone unanswered. > > Thanks! > > Abedi Have you seen MS Forefront? -- -- Nick Owen WiKID Systems, Inc. http://www.wikidsystems.com Commercial/Open Source Two-Factor

Re: Radius authentication against LDAP question

cation-to-openldap-and-freeradius HTH, Nick -- -- Nick Owen WiKID Systems, Inc. http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Any One-Time password system.

On Thu, May 16, 2013 at 11:18 AM, Phil Mayers wrote: > On 16/05/13 15:45, Sergii Bieliaievskyi wrote: > >> >> >> >> 2013/5/16 Phil Mayers > > >> >> >> No. >> >> MPPE requires encryption keys. These can be generated by whatever >> auth method. >> >>

Re: mod_auth_radius

version of the module should be released. Or are > the patches are available somewhere and can be applied? Any idea on a time-frame for a new release? thanks, nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication

Re: PAM_RADIUS_AUTH

t familiar with solaris, but that is what I would check. More info would be helpful too. HTH, Nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: local ssh authentication via radius possible?

goal. It sound like you have 'over-configured' something along the way. For example, I would drop the "Login-IP-Host" accounting piece until you've got the basics running. hth, nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PAM for RADIUS

our pam.d/sshd file. You might get more info on the PAM list or from Sun. In your pam.d/sshd file, check the setting for account and session. Does your log say that the user is being authenticated? What messages are you getting? hth. nick -- -- Nick Owen WiKID Systems, Inc. 404.962.8983 http

Re: OATH Support?

requests from freeradius to your OTP server. I can see if I have any notes from my tests. HTH, Nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 (desk) 404.542.9453 (cell) http://www.wikidsystems.com At last, two-factor authentication, without the hassle factor Now open source: http://sourceforge.

Re: Apache2 - PAM - freeRADIUS - users

/www.outoforder.cc/projects/apache/mod_auth_xradius/ > > But it only works with Apache 2.0.x. With Apache 2.2.x we didn't manage > to get any radius authentication working. I got apache <-> radius working with mod_auth_xradius with apache-2.2.2 on FC6. a very basic how-to is he

Re: radius-apache authentication problem

bscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > -- Nick Owen WiKID Systems, Inc. 404.962.8983 (desk) 404.542.9453 (cell) http://www.wikidsystems.com At last, two-factor authentication, without the hassle factor Now open source: http://sourceforge.net/projects/wik

Re: radius-apache authentication problem

On 3/27/07, Ramazan Ulker <[EMAIL PROTECTED]> wrote: > no change, same errors. mod_auth_xradius don't work in apache 2.2.3 I have only tested with 2.2.2. FWIW, authn_file_module is loaded. Why don't you post the relevant portions of your htaccess and httpd.conf files.

Re: radius-apache authentication problem

ire valid-user So, perhaps apache is getting confused about what mechanism to use where, putting it all in one place might clarify things. HTH, Nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 (desk) 404.542.9453 (cell) http://www.wikidsystems.com At last, two-factor authenticatio

Re: radius-apache authentication problem

FWIW, I have had a chance to test this on 2.2.3 and it did not work for me either. Not sure if it is a bug in apache or a change has been made and the mod_auth modules need updating. On 3/29/07, Nick Owen <[EMAIL PROTECTED]> wrote: > On 3/28/07, Ramazan Ulker <[EMAIL PROTECTED]>

Re: How to add OTP validation to FreeRadius

; > Is there any other solution? I don't think this is really a freeradius question. You need to choose a two-factor authentication system that supports radius. Luckily, most do. hth, Nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to add OTP validation to FreeRadius

can run WiKID on a USB drive, if you're ok with that sort of thing. HTH, nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 (desk) 404.542.9453 (cell) http://www.wikidsystems.com At last, two-factor authentication, without the hassle factor Now open source: http://sourceforge.net/projects/wi

Re: mod_auth_radius

authentication The latter is more recent. HTH, nick -- Nick Owen WiKID Systems, Inc. 404.962.8983 http://www.wikidsystems.com Commercial/Open Source Two-Factor Authentication - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: access only particular website through RADIUS

scribe? See > > http://www.freeradius.org/list/users.html > > > > > > ---- > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html