Configuring multiOTP to send sms when logging in

[TarlanAbdullayev]

Hello. Can you help me? I set multiotp, it works through google authenticator. But I want to configure it via SMS authenticator, using our SMS server. Where and how this can be configured? And can SMS authenticator and google authenticator to work at the same time? Or should only run one?

[multiOTP]

Hello,
Which SMS server do you have ?
And what is your current setup (self-installed multiOTP open source or VM provided by us, which service/device is requiring strong two factor authentication ?)
Regards,

[TarlanAbdullayev]

Thank you for your answer.
SMS web service, send SMS via the operator.
Current setup is VM multiOTP open source. I want to use two-factor authentication in the domain.

[multiOTP]

Did you already install the multiOTP Credential Provider on the machines of the domain ?
To use your own SMS web service, modify the following in the config file of multiOTP (/etc/multiotp/config/multiotp.ini):

• sms-provider = exec
• sms-api-id = /path/to/your/exec param1 param2 param3 (in the parameters, %from is replaced by the sender value, %to is replaced by the destination SMS number and %msg is replaced by the text message).

If you want to receive an SMS; give your username and type sms as the password. The login will be refuses, but you will receive an SMS with a valid code for the next try.

The next version of multiOTP Credential Provider will have the possibility to require an SMS without sending "sms" as a password.

Regards

[TarlanAbdullayev]

Yes, I install version 5.0.4.8.
The first two steps I did. But where to change and set the username and type sms as the password?
And is it possible to use sms authenticator and google authenticator at the same time? Or must apply only one of them?
And when next version of multiOTP Credential Provider will appear?
Thank in advance.

[multiOTP]

Hello,
sms and TOTP ( like google authenticator) can be use as the same time.

With the current version of multiOTP Credential Provider:
First step:
Username : [windows username]
Password: [windows password]
OTP: [s][m][s] (you have to type the three small letters [s] [m] [s] to request the system to send an SMS

Second Step:
Username : [windows username]
Password: [windows password]
OTP: [sms code receveived]

In the next multiOTP Credential Provider available later this month:
Username : [windows username]
Password : [windows password]
Click on the "Send an SMS code" link
Type in the OTP field the received SMS

Regards,

[TarlanAbdullayev]

Hello, One more question. I have this problem: at a time when the password of the account is expired, i can not change it because I can't log in to the account with expired password. How can this be solved? 2017-12-01 17:32 GMT+04:00 multiOTP <notifications@github.com>:

…

Hello, sms and TOTP ( like google authenticator) can be use as the same time. With the current version of multiOTP Credential Provider: First step: Username : [windows username] Password: [windows password] OTP: [s][m][s] (you have to type the three small letters [s] [m] [s] to request the system to send an SMS Second Step: Username : [windows username] Password: [windows password] OTP: [sms code receveived] In the next multiOTP Credential Provider available later this month: Username : [windows username] Password : [windows password] Click on the "Send an SMS code" link Type in the OTP field the received SMS Regards, — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#22 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AgPPO0BqSayz48AURLTy4lC9IHes_zv-ks5s7__-gaJpZM4QjXDq> .

[multiOTP]

Since version 5.0.6.2 which is now available, multiOTP Credential Provider has a "Send an SMS code" link.

[multiOTP]

Hello @TarlanAbdullayev, please write an other issue for the "password change option".

Please note that in the next version of multiOTP open source available later this month, a new option can allow "expired password" to be accepted by the server. This will allow multiOTP to accept connection for expired password.
Of course, this is only half the way, as multiOTP Credential Provider must also be enhanced in order to support password change on the logon interface.

Regards,