guacamole-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Nick Couchman (JIRA)" <>
Subject [jira] [Commented] (GUACAMOLE-197) Implement Support for RADIUS Authentication
Date Mon, 06 Feb 2017 01:42:42 GMT


Nick Couchman commented on GUACAMOLE-197:

bq. I see that you're using GuacamoleInsufficientCredentialsException, which is the intended
mechanism to report that additional credentials are needed (such as a response to a challenge).
What issues are you having specifically?

So, as you can see in the source code, I check the response packet, and, when I get the AccessChallenge
response, I throw the GuacamoleInsufficientCredentialsException.  I set up the field with
the same field type specified on the AngularJS side, and pass that through to the insufficient
credentials method.  I've got the JS stuff set up the way I think it ought to be set up, but
the controller method never actually runs, and the challenge field/template is never displayed.
 I'm sure it's either a simple typo or I haven't fully grasped the integration between the
servlet and the Angular stuff, so I'm not sure why it isn't firing and displaying the challenge

> Implement Support for RADIUS Authentication
> -------------------------------------------
>                 Key: GUACAMOLE-197
>                 URL:
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: guacamole, guacamole-client
>    Affects Versions: 0.9.11-incubating
>            Reporter: Nick Couchman
>            Priority: Minor
> Working on implementing a RADIUS authentication module - guacamole-auth-radius.  The
basic implementation is completed - with a basic PAP or CHAP RADIUS server, the authentication
succeeds and the user is logged in.
> I'm running into an issue, though, trying to implement Challenge/Response in RADIUS.
 I have my RADIUS server configured to talk to LinOTP for MFA/2FA, and RADIUS sends the AccessChallenge
package back, asking for the second factor.  My issue is in my continual failure to grasp
the connection between the servlet side and the AngularJS web application.  I've copied the
Duo authentication code and tried to morph it into something that will present another box
for the RADIUS challenge, but I can't get my controller function to actually fire.
> Once that is working, I'd like to support other RADIUS authentication protocols, like
EAP-TLS and EAP-TTLS, so there's a little more work to be done, but right now I'm focusing
on the basic protocols and the challenge/response.
> Will have a repo posted here in a moment for working on this.

This message was sent by Atlassian JIRA

View raw message