MultiOTP Authentication Server - Revision history

Mapril at 06:25, 19 June 2018

2018-06-19T06:25:56Z

← Older revision		Revision as of 17:25, 19 June 2018
Line 109:		Line 109:
	[[File:NT_radping.png\|688px\|thumb\|center\|Testing RADIUS authentication]]		[[File:NT_radping.png\|688px\|thumb\|center\|Testing RADIUS authentication]]

	If all settings are as above, please check that the RADIUS server is running in "services.msc". Additionally please check the version of Windows, if it is greater then Windows 7, please see the chapter: [[For versions of Windows newer then Windows 7]]		If all settings are as above, please check that the RADIUS server is running in "services.msc". Additionally please check the version of Windows, if it is greater then Windows 7, please see the chapter: [[#For versions of Windows newer then Windows 7]]

	==Alternative server testing tools==		==Alternative server testing tools==

	Many other free RADIUS testing software alternatives exists, for example: [http://www.iea-software.com/products/radiusnt/radlogin4.cfm RadLogin], which supports Windows, Linux, FreeBSD and Sparc Solaris.		Many other free RADIUS testing software alternatives exists, for example: [http://www.iea-software.com/products/radiusnt/radlogin4.cfm RadLogin], which supports Windows, Linux, FreeBSD and Sparc Solaris.

Mapril at 06:25, 19 June 2018

2018-06-19T06:25:13Z

← Older revision		Revision as of 17:25, 19 June 2018
Line 109:		Line 109:
	[[File:NT_radping.png\|688px\|thumb\|center\|Testing RADIUS authentication]]		[[File:NT_radping.png\|688px\|thumb\|center\|Testing RADIUS authentication]]

	If all settings are as above, please check that the RADIUS server is running in "services.msc". Additionally please check the version of Windows, if it is greater then Windows 7, please see the chapter: [[#For versions of Windows newer then Windows 7]]		If all settings are as above, please check that the RADIUS server is running in "services.msc". Additionally please check the version of Windows, if it is greater then Windows 7, please see the chapter: [[For versions of Windows newer then Windows 7]]

	==Alternative server testing tools==		==Alternative server testing tools==

	Many other free RADIUS testing software alternatives exists, for example: [http://www.iea-software.com/products/radiusnt/radlogin4.cfm RadLogin], which supports Windows, Linux, FreeBSD and Sparc Solaris.		Many other free RADIUS testing software alternatives exists, for example: [http://www.iea-software.com/products/radiusnt/radlogin4.cfm RadLogin], which supports Windows, Linux, FreeBSD and Sparc Solaris.

Mapril at 06:24, 19 June 2018

2018-06-19T06:24:30Z

← Older revision		Revision as of 17:24, 19 June 2018
Line 102:		Line 102:
	*Input the shared secret, default: multiotpsecret		*Input the shared secret, default: multiotpsecret
	*Input the username of the account that was synchronized		*Input the username of the account that was synchronized
	*Input the port number used, by default multiOTP uses 1812		*Input the port number used, by default multiOTP uses 1812 (normal port for RADIUS servers)
	**~~Other~~ servers can be 1813, 1645 or 1646		**Note other old/special servers can use 1813, 1645 or 1646

			The 4th OTP is: 536422.

			[[File:NT_radping.png\|688px\|thumb\|center\|Testing RADIUS authentication]]

			If all settings are as above, please check that the RADIUS server is running in "services.msc". Additionally please check the version of Windows, if it is greater then Windows 7, please see the chapter: [[#For versions of Windows newer then Windows 7]]

	==Alternative server testing tools==		==Alternative server testing tools==

	Many other free RADIUS testing software alternatives exists, for example: [http://www.iea-software.com/products/radiusnt/radlogin4.cfm RadLogin], which supports Windows, Linux, FreeBSD and Sparc Solaris.		Many other free RADIUS testing software alternatives exists, for example: [http://www.iea-software.com/products/radiusnt/radlogin4.cfm RadLogin], which supports Windows, Linux, FreeBSD and Sparc Solaris.

Mapril at 06:14, 19 June 2018

2018-06-19T06:14:29Z

← Older revision		Revision as of 17:14, 19 June 2018
Line 91:		Line 91:

	==Testing Authentication==		==Testing Authentication==
	To test a RADIUS authentication server, the simplest tool is to use the 3rd party software [https://www.novell.com/coolsolutions/tools/14377.html\|NTradping], a free tool from Mastersoft for Windows. As of writing this guide, NTRadPing is at version 1.5		To test a RADIUS authentication server, the simplest tool is to use the 3rd party software [https://www.novell.com/coolsolutions/tools/14377.html NTradping], a free tool from Mastersoft for Windows. As of writing this guide, NTRadPing is at version 1.5

	NTRadping allows input of the shared secret, username, OTP, ports and can perform account operations, all with an intuitive interface and is also extremely light weight. It is the fastest/simplest way to test the RADIUS server.		NTRadping allows input of the shared secret, username, OTP, ports and can perform account operations, all with an intuitive interface and is also extremely light weight. It is the fastest/simplest way to test the RADIUS server.
Line 110:		Line 110:
	==Alternative server testing tools==		==Alternative server testing tools==

	Many other free RADIUS testing software alternatives exists, for example: [[http://www.iea-software.com/products/radiusnt/radlogin4.cfm\|RadLogin]], which supports Windows, Linux, FreeBSD and Sparc Solaris.		Many other free RADIUS testing software alternatives exists, for example: [http://www.iea-software.com/products/radiusnt/radlogin4.cfm RadLogin], which supports Windows, Linux, FreeBSD and Sparc Solaris.

Mapril at 06:13, 19 June 2018

2018-06-19T06:13:12Z

← Older revision		Revision as of 17:13, 19 June 2018
Line 64:		Line 64:
	[[File:MultiOTP_listoftkoens.png\|353px\|thumb\|center\|XML token successfully added to MultiOTP]]		[[File:MultiOTP_listoftkoens.png\|353px\|thumb\|center\|XML token successfully added to MultiOTP]]

	Please navigate to "Add a new user"		Please navigate to "Add a new user", then input the required details, but please take note of "Username" and "Specific prefix PIN".
	~~Input~~ the required details, but please take note of "Username" and "Specific prefix PIN".

	For testing MultiOTP, the "Specific prefix PIN" is not necessary, but it significantly increases the effectiveness of OTP protection.		For testing MultiOTP, the "Specific prefix PIN" is not necessary, but for release it is recommended as it significantly increases the effectiveness of OTP protection, for example in the event that the OTP token is stolen.

	In the "select a token" drop down, select the hardware token that was imported. If the token was not successfully imported, it will not appear here.		In the "select a token" drop down, select the hardware token that was imported. If the token was not successfully imported, it will not appear here.
Line 87:		Line 86:
	The 3rd OTP is: 450094		The 3rd OTP is: 450094

	After clicking "Check now", the messages "succeeded" should appear. If the same code is re-used, "Error 26" should appear, as OTP codes can only be used.		After clicking "Check now", the messages "succeeded" should appear. If the same code is re-used, "Error 26" should appear, as OTP codes can only be used once.

	[[File:MultiOTP_checkuser.png\|400px\|thumb\|center\|Testing the new user and token]]		[[File:MultiOTP_checkuser.png\|400px\|thumb\|center\|Testing the new user and token]]

	==Testing Authentication==		==Testing Authentication==
	To test a RADIUS authentication server, the simplest tool is to use the 3rd party software [[https://www.novell.com/coolsolutions/tools/14377.html\|NTradping]], a free tool from Mastersoft for Windows. As of writing this guide, NTRadPing is at version 1.5		To test a RADIUS authentication server, the simplest tool is to use the 3rd party software [https://www.novell.com/coolsolutions/tools/14377.html\|NTradping], a free tool from Mastersoft for Windows. As of writing this guide, NTRadPing is at version 1.5

	NTRadping allows input of the shared secret, username, OTP, ports and can perform account operations, all with an intuitive interface and is also extremely light weight. It is the fastest/simplest way to test the RADIUS server.		NTRadping allows input of the shared secret, username, OTP, ports and can perform account operations, all with an intuitive interface and is also extremely light weight. It is the fastest/simplest way to test the RADIUS server.

Mapril at 06:06, 19 June 2018

2018-06-19T06:06:44Z

← Older revision		Revision as of 17:06, 19 June 2018
Line 53:		Line 53:
	[[File:MultiOTP_weblogin_screen.png\|558px\|thumb\|center\|MultiOTP web server login screen]]		[[File:MultiOTP_weblogin_screen.png\|558px\|thumb\|center\|MultiOTP web server login screen]]

	After logging in, select "Import a new hardware tokens".		After logging in, select "Import new hardware tokens".

			[[File:MultiOTP_importtoken.png\|614px\|thumb\|center\|MultiOTP web server login screen]]

	For this step you must use a .xml PSKC file. To convert a uinf file or for more information about how to retrieve the xml file from an order from SecuTech, please see [[Seed_portal]].		For this step you must use a .xml PSKC file. To convert a uinf file or for more information about how to retrieve the xml file from an order from SecuTech, please see [[Seed_portal]].

Mapril at 06:03, 19 June 2018

2018-06-19T06:03:56Z

@@ Line 16: / Line 16: @@
 Please see [[Seed_portal|UniOTP seed portal]] for downloading UniOTP secret key files.
 ==Installation on Windows==
@@ Line 50: / Line 53: @@
 [[File:MultiOTP_weblogin_screen.png|558px|thumb|center|MultiOTP web server login screen]]
-Import a new hardware token by selecting "Import new hardware tokens"
+After logging in, select "Import a new hardware tokens".
 For this step you must use a .xml PSKC file. To convert a uinf file or for more information about how to retrieve the xml file from an order from SecuTech, please see [[Seed_portal]].
-Selecting "Choose File" opens a window, navigate to the XML file and click "Import". For demonstration purposes, the virtual token from the page: [[Virtual_OTP_token]] is used.
+Selecting "Choose File" opens a window, navigate to the XML file and click "Import". For this guide, the virtual uinf token from the page: [[Virtual_OTP_token]] is used, and can be generated following the instructions given.
 ==Testing Authentication==
 To test a RADIUS authentication server, the simplest tool is to use the 3rd party software [[https://www.novell.com/coolsolutions/tools/14377.html|NTradping]], a free tool from Mastersoft for Windows. As of writing this guide, NTRadPing is at version 1.5

Mapril at 05:36, 19 June 2018

2018-06-19T05:36:44Z

← Older revision		Revision as of 16:36, 19 June 2018
Line 1:		Line 1:
	[[category:UniOTP Authentication Servers]]		[[category:UniOTP Authentication Servers]]
	==MultiOTP Authentication server installation and ~~integration~~ guide==		==MultiOTP Authentication server installation, integration and testing guide==
	Guide Version: 1.0		Guide Version: 1.0
	MultiOTP package at time of writing: 5.1.1.2		MultiOTP package at time of writing: 5.1.1.2
Line 34:		Line 34:
	[[File:MultiOTP_start_stop_radius_service.png\|727px\|thumb\|center\|Windows services and MultiOTP RADIUS and webserver entry]]		[[File:MultiOTP_start_stop_radius_service.png\|727px\|thumb\|center\|Windows services and MultiOTP RADIUS and webserver entry]]

	To correct this, first open the run window (windows ~~buttno~~ + r), type: "services.msc". In the list of services, please sort by name then scroll down to "multiOTP Radius server". It should have the status "Started". Please right click on this and "Stop" the service, after a few seconds the "Started" status should be blank. Please minimize this, do not close.		To correct this, first open the run window (windows button + r), type: "services.msc", then click on "OK". In the list of services, please sort by name then scroll down to "multiOTP Radius server". It should have the status "Started". Please right click on this and "Stop" the service, after a few seconds the "Started" status should be blank. Please minimize this, do not close.

	[[File:MultiOTP_Win8plus.png\|544px\|thumb\|center\|Radius server in compatibility mode]]		[[File:MultiOTP_Win8plus.png\|544px\|thumb\|center\|Radius server in compatibility mode]]
Line 40:		Line 40:
	In the folder "C:\multiotp\windows\radius\sbin" (note "sbin", not "bin"), please right click on "radiusd.exe" and select "Properties". In the "Compatibility" tab, enable "run in compatibility mode" and select "Windows 7" in the drop down, then click apply and ok.		In the folder "C:\multiotp\windows\radius\sbin" (note "sbin", not "bin"), please right click on "radiusd.exe" and select "Properties". In the "Compatibility" tab, enable "run in compatibility mode" and select "Windows 7" in the drop down, then click apply and ok.

	Back in Windows services, right click on "multiOTP Radius server" and start the service. If this step is not taken, the Radius server will not be reachable.		Back in Windows services, right click on "multiOTP Radius server" and start the service.

			If this step is not taken, the Radius server will not be reachable.

	==Integration==		==Integration==
Line 47:		Line 49:
	Password: 1234		Password: 1234
	[[File:MultiOTP_weblogin_screen.png\|558px\|thumb\|center\|MultiOTP web server login screen]]		[[File:MultiOTP_weblogin_screen.png\|558px\|thumb\|center\|MultiOTP web server login screen]]

			Import a new hardware token by selecting "Import new hardware tokens"

			For this step you must use a .xml PSKC file. To convert a uinf file or for more information about how to retrieve the xml file from an order from SecuTech, please see [[Seed_portal]].

			Selecting "Choose File" opens a window, navigate to the XML file and click "Import". For demonstration purposes, the virtual token from the page: [[Virtual_OTP_token]] is used.


	==Token Synchronization==		==Token Synchronization==
	==Testing Authentication==		==Testing Authentication==
			To test a RADIUS authentication server, the simplest tool is to use the 3rd party software [[https://www.novell.com/coolsolutions/tools/14377.html\|NTradping]], a free tool from Mastersoft for Windows. As of writing this guide, NTRadPing is at version 1.5

			NTRadping allows input of the shared secret, username, OTP, ports and can perform account operations, all with an intuitive interface and is also extremely light weight. It is the fastest/simplest way to test the RADIUS server.

			There are 2 files in this download: NTRadPing.exe and raddict.dat.

			Extract this zip to a location of your choice, and launch NTRadPing. No installation is necessary.

			*Input the IP address of the RADIUS authentication server
			*Input the shared secret, default: multiotpsecret
			*Input the username of the account that was synchronized
			*Input the port number used, by default multiOTP uses 1812
			**Other servers can be 1813, 1645 or 1646




			==Alternative server testing tools==

			Many other free RADIUS testing software alternatives exists, for example: [[http://www.iea-software.com/products/radiusnt/radlogin4.cfm\|RadLogin]], which supports Windows, Linux, FreeBSD and Sparc Solaris.

Mapril at 04:55, 14 June 2018

2018-06-14T04:55:51Z

← Older revision		Revision as of 15:55, 14 June 2018
Line 18:		Line 18:

	==Installation on Windows==		==Installation on Windows==
	After downloading the zip package from https://download.multiotp.net/multiotp.zip, extract the content to a location with no spaces. It is recommended to be ~~extract~~ in the root directory of the hard drive, eg. "C:\multiotp". This is to eliminate the possibility of a filename error, all future references to the install location will follow this location.		After downloading the zip package from https://download.multiotp.net/multiotp.zip, extract the content to a location with no spaces. It is recommended to be extracted in the root directory of the hard drive, eg. "C:\multiotp". This is to eliminate the possibility of a filename error, all future references to the install location will follow this location.

	After extracting the package, please navigate to "C:\multiotp\windows".		After extracting the package, please navigate to "C:\multiotp\windows".
Line 24:		Line 24:
	Right click on "radius_install.cmd" and run as administrator. Command prompt will appear and a message with "Please run this script as administrator ... Press any key to continue". Press enter and it will disappear after a few seconds.		Right click on "radius_install.cmd" and run as administrator. Command prompt will appear and a message with "Please run this script as administrator ... Press any key to continue". Press enter and it will disappear after a few seconds.

	Right click on "webservice_install.cmd" and run as administrator. Command prompt will appear and a message with "Please run this script as administrator ..." Press any key to continue. It will disappear ~~almost immediately~~, then your default web browser will open to the ~~default~~ page: http://127.0.0.1:8112/.		Right click on "webservice_install.cmd" and run as administrator. Command prompt will appear and a message with "Please run this script as administrator ... Press any key to continue". Press enter and it will disappear after a few seconds, then your default web browser will open to the page: http://127.0.0.1:8112/.

	<i>Additional: To check if both services installed correctly, open the run window (windows button + r), type: services.msc and press ok. Sort alphabetically and look for "multiOTP Radius Server" and "multiOTP Web Server", if both appear then installation was successful.</i>		<i>Additional: To check if both services installed correctly, open the run window (windows button + r), type: services.msc and press ok. Sort alphabetically and look for "multiOTP Radius Server" and "multiOTP Web Server", if both appear then installation was successful.</i>
Line 31:		Line 31:

	The in-built Radius server provided by MultiOTP has an issue starting with versions of Windows newer then Windows 7, and must be run in compatibility mode.		The in-built Radius server provided by MultiOTP has an issue starting with versions of Windows newer then Windows 7, and must be run in compatibility mode.

			[[File:MultiOTP_start_stop_radius_service.png\|727px\|thumb\|center\|Windows services and MultiOTP RADIUS and webserver entry]]

	To correct this, first open the run window (windows buttno + r), type: "services.msc". In the list of services, please sort by name then scroll down to "multiOTP Radius server". It should have the status "Started". Please right click on this and "Stop" the service, after a few seconds the "Started" status should be blank. Please minimize this, do not close.		To correct this, first open the run window (windows buttno + r), type: "services.msc". In the list of services, please sort by name then scroll down to "multiOTP Radius server". It should have the status "Started". Please right click on this and "Stop" the service, after a few seconds the "Started" status should be blank. Please minimize this, do not close.
Line 38:		Line 40:
	In the folder "C:\multiotp\windows\radius\sbin" (note "sbin", not "bin"), please right click on "radiusd.exe" and select "Properties". In the "Compatibility" tab, enable "run in compatibility mode" and select "Windows 7" in the drop down, then click apply and ok.		In the folder "C:\multiotp\windows\radius\sbin" (note "sbin", not "bin"), please right click on "radiusd.exe" and select "Properties". In the "Compatibility" tab, enable "run in compatibility mode" and select "Windows 7" in the drop down, then click apply and ok.

	Back in Windows services, right click on "multiOTP Radius server" and start the service.		Back in Windows services, right click on "multiOTP Radius server" and start the service. If this step is not taken, the Radius server will not be reachable.

	==Integration==		==Integration==

Mapril at 05:59, 12 June 2018

2018-06-12T05:59:56Z

← Older revision		Revision as of 16:59, 12 June 2018
Line 12:		Line 12:
	For the paid version of MultiOTP please go here: https://www.multiotp.com/		For the paid version of MultiOTP please go here: https://www.multiotp.com/
	For more information about paid vs free versions and source code, go here: https://github.com/multiOTP/multiotp/wiki		For more information about paid vs free versions and source code, go here: https://github.com/multiOTP/multiotp/wiki

			You must use the administrator account on the computer to install MultiOTP.

			Please see [[Seed_portal\|UniOTP seed portal]] for downloading UniOTP secret key files.

	==Installation on Windows==		==Installation on Windows==
	After downloading the zip package from https://download.multiotp.net/multiotp.zip, extract the content to a location with no spaces. It is recommended to be extract in the root directory of the hard drive, eg. "C:\multiotp". This is to eliminate the possibility of a filename error~~. All~~ references to the ~~installed~~ location will follow this location.		After downloading the zip package from https://download.multiotp.net/multiotp.zip, extract the content to a location with no spaces. It is recommended to be extract in the root directory of the hard drive, eg. "C:\multiotp". This is to eliminate the possibility of a filename error, all future references to the install location will follow this location.

	After extracting the package, please navigate to "C:\multiotp\windows".		After extracting the package, please navigate to "C:\multiotp\windows".
Line 26:		Line 30:
	==For versions of Windows newer then Windows 7==		==For versions of Windows newer then Windows 7==

	The in-built Radius server In the folder ~~where~~		The in-built Radius server provided by MultiOTP has an issue starting with versions of Windows newer then Windows 7, and must be run in compatibility mode.

			To correct this, first open the run window (windows buttno + r), type: "services.msc". In the list of services, please sort by name then scroll down to "multiOTP Radius server". It should have the status "Started". Please right click on this and "Stop" the service, after a few seconds the "Started" status should be blank. Please minimize this, do not close.

			[[File:MultiOTP_Win8plus.png\|544px\|thumb\|center\|Radius server in compatibility mode]]

			In the folder "C:\multiotp\windows\radius\sbin" (note "sbin", not "bin"), please right click on "radiusd.exe" and select "Properties". In the "Compatibility" tab, enable "run in compatibility mode" and select "Windows 7" in the drop down, then click apply and ok.

			Back in Windows services, right click on "multiOTP Radius server" and start the service.

	==Integration==		==Integration==