Hi, Is it possible to do two factor authentication with Mac OS X's IKEv2 native client ? As far as I searched,
a) with strongswan client in osx its possible with eap-gtc and pam + oath but native client leftauth is always eap-mschapv2 (also confirmed here <https://wiki.strongswan.org/projects/strongswan/wiki/AppleIKEv2Profile#Authentication-options> ) b) as per this mail <https://lists.strongswan.org/pipermail/users/2012-March/002656.html> its not possible to combine mschapv2 with pam. c) as per this explanation <http://lists.freeradius.org/pipermail/freeradius-users/2016-June/083723.html> the problem that needs to be solved is *HASH( pw+otp) != HASH(pw) + HASH (otp). *I am not sure it can be done with strongswan question: a) on the server is there a way we can do two factor auth with eap-mschapv2 ? or b) on the osx native client is there a way we can use eap-gtc with native client ? Thanks
