Using MFA for Radius

mfa can also be used with the radius authentication to activate mfa for radius admin and users have the qr code, installed the kron pam mobile client, scanned the qr code with the mobile client, and mfa is enabled for the user group using mfa for radius connections establish an ssh connection to kron pam as the pamuser edit the sc radiusd conf file with the command below vi /etc/raddb/sc radiusd conf check the configuration file to see if the parameter below is already configured if not, add the lines below if there is a hash (# ) sign in front of the parameters, delete the hash ( # ) sign to activate the parameter if the parameter value is false, change it to true (default value is true) to type or add anything in the vi editor, first press the insert button on the keyboard, then type in the necessary line press esc to exit typing mode to save the file press esc, then colon ( ), then type in wq! , and press enter if you don’t want to save the changes on the file, press esc, then colon ( ), then type in q! and press enter sc otp enabled=true when the otp login screen comes up, the system message can be changed under the sc radiusd conf file default message sc otp message= kron pam please enter otp service restart is required for the change in the configuration file to take place systemctl restart pam radius service