Re: EAP-OTP support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Apr 03, 2018 at 04:11:36PM -0700, James Prestwood wrote:
> I am wondering if hostapd supports EAP-OTP. I see code in
> wpa_supplicant for it, but nothing in hostapd. I am trying to test EAP-
> OTP with PEAP and have a user file:
> 
> # Phase 1 users
> * PEAP [ver=1]
> # Phase 2
> "secure@xxxxxxxxxxxx" OTP "testpasswd" [2]
> 
> Running with this file I get:
> 
> Unsupported EAP type 'OTP' on line 4 in '/tmp/eap-user-peap-otp.text'

No, there is no support for EAP-OTP in hostapd EAP server. The EAP
method itself would be trivial to add, but the main reason for not
having added that is in the password configuration or a lack of any
convenient mechanism to interface with dynamic password generation. A
fixed password in the EAP user database is not exactly the model in
which OTP is supposed to be used.

Do you have a specific use case in mind for EAP-OTP?

-- 
Jouni Malinen                                            PGP id EFC895FA

_______________________________________________
Hostap mailing list
Hostap@xxxxxxxxxxxxxxxxxxx
http://lists.infradead.org/mailman/listinfo/hostap



[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux