Push Notification Authentication for RADIUS 2FA request (RD Gateway)?

[cornelinux]

@arddg

It seems “push_wait” parameter in pushauth policy has no effect. I did set it to 30 seconds, but radius server waits only for 10 sec for user’s confirmation. I had to set TIMEOUT=30 parameter in rlm_perl.ini file and now it works as expected and users has 30 seconds to confirm push. It that okay?

Yes. You have to be aware of all timeout is the authentication stack.

@arddg

Also I have noticed that if I enroll one more push token to the same user for another device, a user has to confirm push notifications on both devices for successful authentication. Push notifications come to both devices. If he confirms only on one of devices - authentication does not work.

Are these really two devices? Or are the devices linked to the same Cloud account? Then they probably have the same firebase_token. So for the push service, this is one device.

@arddg

But another one is perl-privacyidea: ERROR: Internal failure creating pair &reply:privacyIDEA-Serial += $RAD_REPLY{'privacyIDEA-Serial'} -> 'undef'
Is it an expected behavior?

This is fine. You can unconfigure this is rlm_perl.ini.