General — multiOTP Pro forum

Updating php version - security issues.

multiuser34 — Tue, 03 Mar 2026 13:18:56 +0000

Hello, I'm using free version of multiotp with PHP version 8.4.13 but it has security issues according to Nessus (CVE-2025-14177) is there a way to upgrade it to min. 8.4.16 ?

Problem when double authentication

nicoco — Tue, 10 Mar 2026 08:32:03 +0000

I have a problem no my multiotp server (PHP) on Linux. I have some radius clients that try to connect twice successively (I dont't know why exactly). But in this case, the multiotp sends an error to freeradius on the second auth with message "token of user xxx already used" with error #26. Is it a normal response and in this case, is there a way to authorize a second use of the same token ?

Locked out of Client Laptop

All0verIT — Mon, 17 Feb 2025 03:56:48 +0000

OK, So I did something REALLY stupid. I was looking at MultiOTP for the first time. I installed the Hyper-V Server on my Laptop, all working fine, but set to manual start up. I then started fiddling around with Credential Provider on the same laptop. Next time I reboot the Laptop I get the multiOTP Login screen. When I enter the local Creds, I get the request for a OTP, which I cannot supply because the Server is not running and nothing is really fully configured. I am not locked out of my laptop . . . Is there some way to disable the multiOTP login and return to the local login so I can clean up my laptop? Geoff

MultiOTP Credential Provider - Stuck at Other User

abdulaleem — Sat, 04 Jan 2025 07:36:10 +0000

I have implemented multiotp credential provider (5.9.8.0) on windows server 2016 for RDP login. Normally, Its working OK but when a user is set to change password, then credential provider brings the password change prompt and the password is changed successfully but after that instead of initiating login processes, login screen gets stuck displaying "Other User" and nothing happens.

MultiOTP Fortigate ssl-vpn group problem

JarekPogan — Tue, 09 Apr 2024 15:02:31 +0000

hi I'am trying to integrate multiotp pro as a radius (with Windows AD backend) for fortigate, and when i try to select a specific group of users this is not working, multiotp do not pass groups to fortigate, fortigate is expecting Attribue off "Fortigate-group" how can i pass something like that to fortigate with multiotp ?

connecting with RDS2022

fishtail — Thu, 21 Mar 2024 04:13:36 +0000

Hi, a newbie here. I have multiOTP running on docker. The credential provider is installed on the RD Host. When I tried to use it on RDS, it failed with "wrong one-time password" I can't find documentations (apologize if overlooked) regarding to 'ddns' folder. Here's what log showed: 2024-03-18 03:00:59 warning System Error: Unable to create the missing devices folder /etc/multiotp/ddns/ 0 842c98edad03 2024-03-18 03:01:18 warning System Error: Unable to create the missing devices folder /etc/multiotp/ddns/ 0 842c98edad03 2024-03-18 03:01:18 notice XXX User OK: User XXX successfully logged in with TOTP token 0 842c98edad03 thoughts/suggestoins is greatly appreciated.

one account multiple keys

shb256 — Wed, 03 May 2023 18:24:42 +0000

I know, that I can assign one key to multiple accounts. Can I also assign multiple keys to one account? thanks

Don't ask for 2FA for local account

shb256 — Thu, 13 Apr 2023 14:10:22 +0000

Hello, I ve setup multiotp in a domain environment, every thing is working as expected But on every computer I have one localadmin account. The Password of this account will change ever 30 days automaticly But when I try to login with the local account, I am ask for the second factor During installation process I have selected "Disable 2FA promt for multiOTP without 2FA users" the account name does not exist in the domain. i ve tried ".\username" and "username@computername" In both cases I am asked for the second factor Is there a way to get access with the local account and without a second factor? thanks

Where is the self service portal

shb256 — Mon, 16 Jan 2023 16:55:50 +0000

Hello, I was looking for the self-service portal, but I dont find it. Maybe someone can point me the direction

FreeRadius 3 and groups

agentsmith — Wed, 15 Jun 2022 10:00:03 +0000

I have configured MultiOTP 5.8.2.1 and FreeRadius 3 for a firewall access, and it's working fine for my test user. However, when I assign a group to the user, and I receive a reject: (0) multiotpmschap: Program returned code (0) and output 'Filter-Id += "xyz",NT_KEY: 087A06B8319E21E207111468C19E1F0A ' (0) multiotpmschap: ERROR: Invalid output from ntlm_auth: expecting 'NT_KEY: ' prefix (0) multiotpmschap: ERROR: MS-CHAP2-Response is incorrect The following are set: multiotp -config group-attribute="Filter-Id" multiotp -config ldap-in-group="xyz" multiotp -set user group="xyz" There are posts suggesting that the response from MultiOTP ('Filter-Id += "xyz",NT_KEY: 087A06B8319E21E207111468C19E1F0A ') is not valid for FreeRadius 3, but may have worked with FreeRadius 2. Any workarounds? Thanks.

Yubico Keys

mmcswain — Tue, 08 Aug 2017 15:35:53 +0000

Is there documentation on how to setup users to be able to use Yubico Keys? I see the option, but do not see a way to tie a specific key to a user.

Windows Authentication

mmcswain — Tue, 02 May 2017 11:05:24 +0000

We are using the MultiOTP Credential Provider from LastSquirrelIT for Windows Authentication using MultiOTP Pro as the 2nd factor. The problem is that there has not been any updates or development on this project in 2 years. Does anyone have any other Credential Provider suggestions that works well with Windows 2008 through Windows 2016?

storing username and password

sims — Mon, 29 May 2017 00:22:57 +0000

Hi, Freeradius has feature to save username and password. when we use multiotp as as 2ndfactor auth ,does it save username and password (primary auth) ? Thanks

Bug if username use accented characters in AD

ICONsa — Mon, 23 Mar 2015 12:32:57 +0000

Hi, I have a problem with a username sync from active directory if username use accented characters

User appear twice and I can't remove