On Thu, Apr 14, 2016 at 10:50 PM, Lance LeFlore <lance at 3t218.org> wrote: > Hi, > I'm trying to configure plain auth using PIN + OTP. However, ocserv > seems to be telling me that there are too many digits in the string > I'm providing on the client (openconnect v5.02) end. Providing the OTP > without the PIN allows the user to authenticate successfully > (regardless of what's in column 3 of users.oath). > FWIW, I've also tried using a shorter (2 digit) PIN + OTP with no success. The passwd+otp option gives you two prompts. One asks for your password and the second for the OTP. regards, Nikos