Bug Pfsense 2.4.1 Freeradius 0.15.1 OTP Google Authentcation is not working

[horstvogel]

Hello,
clean Installation: Pfsense 2.4.1 with freeradius 0.15.2 OTP Google Authentcation is not working

clean Installation: Pfsense 2.3.4 with freeradius 0.15.1 OTP Google Authentcation is  working

test with Alix Board APU1D and APU2C

I think this must be a bug

[profiler]

yeah, same here, do we need to make a bug report?

[jimp]

It works here when I run it on 2.4.1 (FreeRADIUS 3.x 0.15.2)

Are you certain you're using it correctly? Remember the "password" is the user's PIN + the Google Authenticator code, so if the PIN is 1234 and the GA code is 999999 then the user must enter 1234999999 to authenticate

[jimp]

Also, check the RADIUS server entry under System > User Manager, Authentication Servers tab. It must be set to PAP.

[profiler]

@jimp:

Also, check the RADIUS server entry under System > User Manager, Authentication Servers tab. It must be set to PAP.

Changed to PAP and auth successful. Thanks a lot!

[horstvogel]

Working!!! :)
Thanks

[baltazar_gabka]

I am getting Authentication Failed error message when I try to authenticate with PIN+code under Diagnostic tab.
This is what I am getting in the System Logs:

Apr 26 15:47:49 	googleauth.py 		freeRADIUS: Google Authenticator - Authentication failed. User: mredo, Reason: wrong PIN
Apr 26 15:47:49 	radiusd 	1507 	(1) Login incorrect (Failed retrieving values required to evaluate condition): [mredo] (from client pfsenseclient port 0) 

I am running on 2.4.3. Does anyone have any clue?

I forgot to mention that I definitely use a correct PIN number.

[baltazar_gabka]

This is what happens when the Shared Secret key does now match ;)