rlm_eap_gtc

The eap_gtc module implements EAP-GTC authentication. It is a submodule of eap and cannot be used on its own.

GTC stands for Generic Token Card. The intent is to permit the use of challenge-response token cards with EAP. The challenge and the response are sent in the clear, which means that they are visible to anyone who can monitor the wireless or wired network traffic. Therefore, this module should only be inside of an EAP-TTLS or an EAP-PEAP tunnel. The TLS tunnel will protect the challenge and response from eavesdroppers.

It is not recommended to proxy the inner-tunnel EAP-GTC information. Doing so would negate the security of using either EAP-TTLS or EAP-PEAP

The module challenges the user with a fixed text string and looks for a response from the user. When the module sees the user’s response, it puts the response into a User-Password attribute. Another module is then called to validate the password.

None.

None.