Yubico Forum

Has anyone looked into authenticating FreeRadius clients with an external script instead of a PAM module?

The reason I ask is my VPN server is an OpenBSD box which doesn't support PAM so we should be able to authenticate with a script instead right? I am unsure of the security implications around this though!

Right now, there is no Yubico authentication script available. An authentication script can be developed in Perl by referring to the open source Yubico PAM module. Any effort or experience sharing of developing such a script for OTP authentication would be highly appreciated!

Feel free to write back to us in case you have any further queries.

Thanks, I just looked into it and on second thoughts it looks extremely easy to implement in perl by just passing it to the yubico authentication server and back to radius using the rlm_perl module! I'll be sure to share anything I come up with...!