Feature #16582 » freeradiussettings.xml.patch
| net/pfSense-pkg-freeradius3/files/usr/local/pkg/freeradiussettings.xml | ||
|---|---|---|
| 338 | 338 |
<type>input</type> |
| 339 | 339 |
<default_value>1-6</default_value> |
| 340 | 340 |
</field> |
| 341 |
<field> |
|
| 342 |
<fielddescr>OTP Anti-Replay Protection</fielddescr> |
|
| 343 |
<fieldname>varsettingsotpantireplay</fieldname> |
|
| 344 |
<description>Enable OTP Anti-Replay Protection (RFC 6238)</description> |
|
| 345 |
<sethelp> |
|
| 346 |
<![CDATA[ |
|
| 347 |
When enabled, each OTP code can only be used once within its validity window (90 seconds).<br/> |
|
| 348 |
This provides RFC 6238 compliance and prevents replay attacks where an intercepted code could be reused.<br/> |
|
| 349 |
Used tokens are tracked in <code>/var/run/freeradius/</code> and automatically cleaned up.<br/> |
|
| 350 |
<span class="text-info">(Default: Disabled for backward compatibility)</span> |
|
| 351 |
]]> |
|
| 352 |
</sethelp> |
|
| 353 |
<type>checkbox</type> |
|
| 354 |
</field> |
|
| 341 | 355 |
<field> |
| 342 | 356 |
<name>Miscellaneous Configuration</name> |
| 343 | 357 |
<type>listtopic</type> |