Re: FreeRadius - IIS Outlook Web Access (OWA)

2012-05-04 Thread udptelecom
Any other alternatives? Has anyone any experience fronting OWA with an
Apache HTTP reverse-proxy, authenticating users via the mod_auth_radius
module and perhaps passing on the credentials to OWA ?

On Thu, May 3, 2012 at 4:21 PM, Nick Owen no...@wikidsystems.com wrote:

 On Thu, May 3, 2012 at 3:51 PM, udptelecom udptele...@gmail.com wrote:
 
 
  Hi,
 
  Anyone know of an ISAPI filter that understands RADIUS that can be used
 to
  authenticate to FreeRadius. This would be used to authenticate access to
  Outlook Web Access (OWA) running under IIS. I know of one provider
  http://www.tcpdata.com - but they're site is currently down and all my
 calls
   emails have gone unanswered.
 
  Thanks!
 
  Abedi

 Have you seen MS Forefront?

 --
 --
 Nick Owen
 WiKID Systems, Inc.
 http://www.wikidsystems.com
 Commercial/Open Source Two-Factor Authentication
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FreeRadius - IIS Outlook Web Access (OWA)

2012-05-03 Thread udptelecom
Hi,

Anyone know of an ISAPI filter that understands RADIUS that can be used to
authenticate to FreeRadius. This would be used to authenticate access to
Outlook Web Access (OWA) running under IIS. I know of one provider
http://www.tcpdata.com - but they're site is currently down and all my
calls  emails have gone unanswered.

Thanks!

Abedi
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question about Access-Challenge

2011-07-08 Thread Udptelecom
Yes, it works this way. But the requirements are for a two phase authentication.

Sent from my iPhone

On Jul 8, 2011, at 2:11 AM, Fajar A. Nugraha l...@fajar.net wrote:

 On Fri, Jul 8, 2011 at 10:14 AM, Jamshid Abedi udptele...@gmail.com wrote:
 Hello,
 
 I've got Mobile OTP to work with FreeRadius, I'd like to take this one step
 further and turn this into a two phase process. The objective is to first
 take the pin, authenticate that and then communicate to the NAS with a
 challenge to receive the OTP from the user. I think this can be done via an
 access-challenge reply to the NAS. My question is how do I get FreeNAS to
 send an Access-Challenge once it has verified the PIN is correct? If anyone
 can kindly give me some hints or point me in the right direction.
 
 IMHO the simplest way would be just concatenate them together. e.g. if:
 - your pin is 4 digits
 - your OTP is 12 digits
 - you use PAP
 
 then you can ask your users to put the 4 digit pin followed by 12
 digit OTP, so the password will be 16 digits. And since you use PAP,
 you get User-Password attribute in the request which can easly be
 split using unlang/regex into two components, which you can then
 verifiy.
 
 -- 
 Fajar
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html