Re: mideye authentication

2008-03-03 Thread Norbert Wegener
.. See rlm_example for a simple C challenge-response authentication module. You may also need a consistent State attribute. That code is in rlm_eap, but should probably be pulled into src/main, because other modules may need it, too. Thanks, that was the missing link. Norbert Wegener

Re: mideye authentication

2008-03-02 Thread Alan DeKok
Norbert Wegener wrote: > The box I am talking about is a Juniper vpn gateway. There they have > Custom Radius Authentication Rules and in the configuration menu there is: > If received packet Type :Access Challenge > Take action: Show Next Token page That's pretty common. > Now it seems to me,

Re: mideye authentication

2008-03-02 Thread Norbert Wegener
Norbert Wegener wrote: Alan DeKok wrote: Norbert Wegener wrote: It should be simple to generate a one time password, throw it into a database,send it via sms and make it available for the next time, the user requests access. The problem here seems to be, that after a first successfull authen

Re: mideye authentication

2008-03-01 Thread Norbert Wegener
Alan DeKok wrote: Norbert Wegener wrote: It should be simple to generate a one time password, throw it into a database,send it via sms and make it available for the next time, the user requests access. The problem here seems to be, that after a first successfull authentication another one wi

Re: mideye authentication

2008-03-01 Thread Alan DeKok
Norbert Wegener wrote: > It should be simple to generate a one time password, throw it into a > database,send it via sms and make it available for the next time, the > user requests access. The problem here seems to be, that after a first > successfull authentication another one with only a new pa

Re: mideye authentication

2008-02-29 Thread Ivan Kalik
otp.conf in raddb directory. Ivan Kalik Kalik Informatika ISP Dana 29/2/2008, "Norbert Wegener" <[EMAIL PROTECTED]> piše: >One of our customers uses an authentication service from Mideye, which >is described this way: > >The end-user requests access to a >protected application, and is prompted

mideye authentication

2008-02-29 Thread Norbert Wegener
One of our customers uses an authentication service from Mideye, which is described this way: The end-user requests access to a protected application, and is prompted for a user name and password. If the correct credentials have been provided, a one- time password (OTP) is presented on the user'