summaryrefslogtreecommitdiff
path: root/USAGE
diff options
context:
space:
mode:
authorAlan T. DeKok <aland@freeradius.org>2024-06-12 13:29:36 -0400
committerRobert Gingras <rgingras@mieweb.com>2025-03-31 11:39:54 -0400
commitdde67d80623bdca4da8e76467b90754e34835ae3 (patch)
tree06a8d6335fca0d8322717efd5215b04ae329eb7d /USAGE
parent84184844ec80c840a3499bb3fedd74ea9acf4dd2 (diff)
downloadlibpam-radius-auth-dde67d80623bdca4da8e76467b90754e34835ae3.tar.gz
libpam-radius-auth-dde67d80623bdca4da8e76467b90754e34835ae3.zip
add and document "require_message_authenticator" flag
Diffstat (limited to 'USAGE')
-rw-r--r--USAGE8
1 files changed, 8 insertions, 0 deletions
diff --git a/USAGE b/USAGE
index 0fce66b..fdd1e70 100644
--- a/USAGE
+++ b/USAGE
@@ -104,5 +104,13 @@ max_challenge=# - configure maximum number of challenges that a server
may request. This is a workaround for broken servers
and disabled by default.
+prompt_attribute - Enable honoring of Prompt attribute sent from server for
+ challenge-response to enable/disable of echoing of user
+ input. Without this option all user input during
+ challenge-response will be echoed. See RFC2869 Section 5.10
+
+require_message_authenticator - Discard Access-Accept, Access-Challenge, and
+ Access-Reject packets which do not contain Message-Authenticator.
+
---------------------------------------------------------------------------