HP-UX PAM RADIUS A.01.00 Release Notes

by the previous module. Following are the valid
values for <tokentype>:
Password
The previous module had set
password as the
authentication token. This is
the default value, if this
option is not set, or if an
invalid value is set.
Otp
The previous module had set
OTP as the authentication
token.
PasswordOtp
The previous module had set
password appended with
OTP as the authentication
token.
Usage when use_first_pass is set:
• If the option set here (for example,
Password) is not consistent with
rad_authtok (for example, Otp), then the
module fails to authenticate the user.
• If rad_authtok=PasswordOtp, and
recv_authtok=Password (or OTP), the
module picks the Password (or Otp) from
the PAM handle and prompts the user for
the missing token (either Otp or Password).
Usage when try_first_pass is set:
If try_first_pass is set, then the module
attempts to use the previous value if possible; if
not it prompts the user for the required
authentication tokens.
NOTE: This option is used only when
try_first_pass or use_first_pass is set.
rad_authtok=<tokentype>
This option informs the module about the nature
of the validation that must be performed. Based
on the value of the rad_authtok option and
the authentication token received from the
previous module, HP-UX PAM RADIUS prompts
the user for the missing authentication tokens
and performs the authentication. Following are
the valid values for <tokentype>:
6