From 188b3624989022dbec69f391234ddf060c516197 Mon Sep 17 00:00:00 2001
From: Alexander Wilke <nachtfalkeaw@web.de>
Date: Tue, 7 Feb 2012 22:54:33 +0100
Subject: OTP support

---
 config/freeradius2/freeradius.xml | 36 +++++++++++++++++++++++++++++++++---
 1 file changed, 33 insertions(+), 3 deletions(-)

(limited to 'config')

diff --git a/config/freeradius2/freeradius.xml b/config/freeradius2/freeradius.xml
index 3ef0711c..48c663e7 100644
--- a/config/freeradius2/freeradius.xml
+++ b/config/freeradius2/freeradius.xml
@@ -201,7 +201,7 @@
 		<field>
 			<name>GENERAL CONFIGURATION</name>
 			<type>listtopic</type>
-		</field>	
+		</field>
 		<field>
 			<fielddescr>Username</fielddescr>
 			<fieldname>varusersusername</fieldname>
@@ -214,6 +214,36 @@
 			<description><![CDATA[Enter the password for this username. If you do not  want to use username/password but custom options then leave this empty.]]></description>
 			<type>password</type>
 		</field>
+		<field>
+			<fielddescr>Enable Mobile-One-Time-Password For This User</fielddescr>
+			<fieldname>varusersmotpenable</fieldname>
+			<description><![CDATA[This enables the possibility to authenticate against username and a one-time-password. The client to generate OTP can be installed on various mobile device plattforms like Android and more. If you enable this the first time we need to download and install bash so the process will need some time. (Default: uncheck)]]></description>
+			<type>checkbox</type>
+			<enablefields>varusersmotpinitsecret,varusersmotppin,varusersmotpoffset</enablefields>
+		</field>
+		<field>
+			<fielddescr>Init-Secret</fielddescr>
+			<fieldname>varusersmotpinitsecret</fieldname>
+			<description><![CDATA[This is the generated init secret you get when you initialize the toke the first time on a client (mobile device).]]></description>
+			<type>password</type>
+		</field>
+		<field>
+			<fielddescr>PIN</fielddescr>
+			<fieldname>varusersmotppin</fieldname>
+			<description><![CDATA[This is the PIN the user has to enter on his mobile device to generate a one-time-password.]]></description>
+			<type>password</type>
+		</field>
+		<field>
+			<fielddescr>Time Offset</fielddescr>
+			<fieldname>varusersmotpoffset</fieldname>
+			<description><![CDATA[If the client is not in the correct time zone or is not changing time zone automatically than you have to calculate the offset and enter it here. To calculate it do the following:<br><br>
+			
+									1. Write down the first 9 digits of the Epoch-Time on the client.<br>
+									2. Check with <b>date +%s</b> the Epoch-Time on your FreeRADIUS server and write down the first 9 digits.<br>
+									3. Subtract both values, multiply the result with 10 and enter the value in this field. (Default: 0)]]></description>
+			<type>input</type>
+			<default_value>0</default_value>
+		</field>
 		<field>
 			<name>MISCELLANEOUS CONFIGURATION</name>
 			<type>listtopic</type>
@@ -222,7 +252,6 @@
 			<fielddescr>Number of simultaneous connections</fielddescr>
 			<fieldname>varuserssimultaneousconnect</fieldname>
 			<description><![CDATA[The maximum of simultaneous connections with this username. If you leave this field empty than there is no limit. If you are using FreeRADIUS with CaptivePortal you should leave this empty.]]></description>
-			<default_value></default_value>
 			<type>input</type>
 		</field>
 		<field>
@@ -294,7 +323,8 @@
 			<fielddescr>Possible Login Times</fielddescr>
 			<fieldname>varuserslogintime</fieldname>			
 			<description><![CDATA[Enter the time when this user should have access. If no time is entered it means "always".<br>
-							Every time string contains a day (Mo,Tu,We,Th,Fr,Sa,Su) or all weekdays which is from monday till friday (Wk). All weekdays plus the weekend is (Al).<br><br>
+							Every time string contains a day (Mo,Tu,We,Th,Fr,Sa,Su) or all weekdays which is from monday till friday (Wk).<br>
+							All weekdays plus weekend which means all days from monday till sunday is (Al).<br><br>
 							<b>Wk0855-2305,Sa,Su2230-0230</b><br><br>
 							This means weekdays after 8:55 AM and before 11:05 PM | any time on saturday | sunday after 10:30 PM and before 02:30 AM.]]></description>
 			<type>input</type>
-- 
cgit v1.2.3