[
https://issues.apache.org/jira/browse/GUACAMOLE-197?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15853432#comment-15853432
]
Nick Couchman commented on GUACAMOLE-197:
-----------------------------------------
bq. I see that you're using GuacamoleInsufficientCredentialsException, which is
the intended mechanism to report that additional credentials are needed (such
as a response to a challenge). What issues are you having specifically?
So, as you can see in the source code, I check the response packet, and, when I
get the AccessChallenge response, I throw the
GuacamoleInsufficientCredentialsException. I set up the field with the same
field type specified on the AngularJS side, and pass that through to the
insufficient credentials method. I've got the JS stuff set up the way I think
it ought to be set up, but the controller method never actually runs, and the
challenge field/template is never displayed. I'm sure it's either a simple
typo or I haven't fully grasped the integration between the servlet and the
Angular stuff, so I'm not sure why it isn't firing and displaying the challenge
box.
> Implement Support for RADIUS Authentication
> -------------------------------------------
>
> Key: GUACAMOLE-197
> URL: https://issues.apache.org/jira/browse/GUACAMOLE-197
> Project: Guacamole
> Issue Type: Improvement
> Components: guacamole, guacamole-client
> Affects Versions: 0.9.11-incubating
> Reporter: Nick Couchman
> Priority: Minor
>
> Working on implementing a RADIUS authentication module -
> guacamole-auth-radius. The basic implementation is completed - with a basic
> PAP or CHAP RADIUS server, the authentication succeeds and the user is logged
> in.
> I'm running into an issue, though, trying to implement Challenge/Response in
> RADIUS. I have my RADIUS server configured to talk to LinOTP for MFA/2FA,
> and RADIUS sends the AccessChallenge package back, asking for the second
> factor. My issue is in my continual failure to grasp the connection between
> the servlet side and the AngularJS web application. I've copied the Duo
> authentication code and tried to morph it into something that will present
> another box for the RADIUS challenge, but I can't get my controller function
> to actually fire.
> Once that is working, I'd like to support other RADIUS authentication
> protocols, like EAP-TLS and EAP-TTLS, so there's a little more work to be
> done, but right now I'm focusing on the basic protocols and the
> challenge/response.
> Will have a repo posted here in a moment for working on this.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
