How can we test free radius for SET New PIN and Next Tokencode mode with AM using NTRadPING

[SriPrasanna]

How can we test free radius for SET New PIN and Next Tokencode mode with AM using NTRadPING

Like in article for SBR we use below

https://community.rsa.com/t5/securid-access-knowledge-base/how-to-set-pins-and-navigate-next-tokencode-mode-for-rsa-securid/ta-p/7280

[Marcin]

A tool worth recommending, old but very useful, I've been using it since 2008.

[BharathMadhiraj · Accepted solution]

@SriPrasanna @Marcin 

Same steps hold good for 8.6 and up with minimal changes 

Create a test RADIUS client

Unlike make/model be set - Standard RADIUS for the previous version's of AM running SBR - For AM 8.6 and up create a test RADIUS client with make/model as - FreeRADIUS

1. Login to the Security Console and navigate to RADIUS > RADIUS Client > Add New.
2. Enter information to register your local machine as a RADIUS client.

1. Enter a client name and the IP address of your machine.
2. set the make/model as - FreeRADIUS  -
3. Create a RADIUS shared secret, such as 12345.  You will need to enter this secret into the NTRadPing interface, so make a note of it.
4. Click Save & Create Associated RSA Agent.
5. Click Save when prompted.
6. Click Yes, Save Agent.

Following differences would be noted in the RADIUS server reply :

Unlike short state values with SBR RADIUS server responses over the earlier version of AM. State values of AM 8.6 and up with FreeRADIUS are longer 

When a new fixed passcode was sent to the RADIUS server, the response we get back is an Access-Challenge, as shown here:

RADIUS Server reply:

response: Access-Challenge
----------------------------attribute dump-----------------------------
Reply-Message=\0x0d\0x0a Enter your new PIN having from 4 to 8 ....
State=RSA|cb3c9a64-6f94-493c-82fd-233c11677c51|868a764f-bdf1-4c86-93cc-bea84f0b9c7a|SECURID_NEWPIN

RADIUS Server reply:

response: Access-Challenge
----------------------------attribute dump-----------------------------
Reply-Message=\0x0d\0x0a Please re-enter new PIN:
State=RSA|cb3c9a64-6f94-493c-82fd-233c11677c51|7e87113d-5d51-4489-8b2c-106b9cdf74aa|SECURID_NEWPIN_CONFIRM

RADIUS Server reply:

response: Access-Challenge
----------------------------attribute dump-----------------------------
Reply-Message=\0x0d\0x0a Wait for the token code to change
Reply-Message=\0x0d\0x0a then enter the new passcode:
State=RSA|cb3c9a64-6f94-493c-82fd-233c11677c51|84789bc6-dbdd-485e-a298-2530f63eb72c|SECURID

[SriPrasanna]

Thanks @BharathMadhiraj for your response.

I will give this a try.