Re: [rad] Re: Problem with external authentication script

2009-06-18 Thread Stefan Kuegler
Hello to all. Try moving the user1 line before the DEFAULT (and reverse the 'fall through' specifications) Thank you Charles for your advice. But the problem in this case is: If I move the user-lines before DEFAULT, freeradius tries to authenticate with any other Auth-Method, exept MOTP.

Re: [rad] Re: Problem with external authentication script

2009-06-18 Thread Ivan Kalik
Try moving the user1 line before the DEFAULT (and reverse the 'fall through' specifications) Thank you Charles for your advice. But the problem in this case is: If I move the user-lines before DEFAULT, freeradius tries to authenticate with any other Auth-Method, exept MOTP. It will

Re: [rad] Re: Problem with external authentication script

2009-06-17 Thread Stefan Kuegler
Hello Ivan. Forcing Auth-Type in users file should work. Thanks for this advice. I changed my users file to use MOTP as the DEFAULT-Auth-Type (first entry of the users file). /etc/freeradius/users - DEFAULT Auth-Type = MOTP Exec-Program-Wait =

Re: [rad] Re: Problem with external authentication script

2009-06-17 Thread Charles Gregory
On Wed, 17 Jun 2009, Stefan Kuegler wrote: /etc/freeradius/users - DEFAULT Auth-Type = MOTP Exec-Program-Wait = /usr/local/bin/otpverify.sh '%{User-Name}' '%{User-Password}' '%{Secret}' '%{PIN}' '%{Offset}', Fall-Through = yes user1

Re: [rad] Re: Problem with external authentication script

2009-06-15 Thread Charles Gregory
On Mon, 15 Jun 2009, Stefan Kuegler wrote: exec motp { wait = yes program = /usr/local/bin/otpverify.sh %{User-Name} %{User-Password} %{reply:Secret} %{reply:PIN} %{reply:Offset} input_pairs = request output_pairs = config } Silly thought: The exec is

Re: [rad] Re: Problem with external authentication script

2009-06-15 Thread Ivan Kalik
On Mon, 15 Jun 2009, Stefan Kuegler wrote: exec motp { wait = yes program = /usr/local/bin/otpverify.sh %{User-Name} %{User-Password} %{reply:Secret} %{reply:PIN} %{reply:Offset} input_pairs = request output_pairs = config } It seems, that freeradius