Article

NEW: Support for Novell Access Manager 3.1

Introduction

A popular authentication method is to log in with a generated token that is sent to the user's mobile phone. This authentication method can be configured with almost any SMS gateway that uses HTTP/POST to receive the message.

Here's how the method works:

a) The user first needs to identify himself with his credentials.
b) If they are valid, the Identity Server will generate a token and lookup the mobile phone number from the user.
c) When this is successfully done, a HTTP/POST is done to the SMS gateway with the needed parameters build from the class properties, the generated token and the users mobile phone number.
d) The SMS gateway receives the POST and tries to send the SMS.
e) The gateway sends a response message to the Identity Server.
f) If the response is valid, the Identity server displays a form asking for the token.
g) If the user types the correct token, he'll be successfully authenticated.

The process is shown in the diagram below.

Click to view.

Figure 1 - SMS Token-based authentication method

Installation

1. Get the BA Authentication modules here: http://www.novell.com/coolsolutions/tools/20017.html

2. Go to the Identity server.

3. Copy ba-idp-auth.jar to /var/opt/novell/tomcat4/webapps/nidp/WEB-INF/lib

4. Copy the JSP's to /var/opt/novell/tomcat4/webapps/nidp/jsp

Configuration

You'll need to create a new Authentication Class.

1. For the Java class, choose Other.

2. For the Java class path, use "com.novell.ba.idpauth.SMSLogin"

3. For the properties, refer to the table and the examples.

4. Create Authentication Methods as Contracts, as described in http://www.novell.com/documentation/novellaccessmanager/adminguide/data/b1tvhkg.html

Click to view.

Figure 2 - SMS Login, General tab

Click to view.

Figure 3 - SMS Login, Properties tab

Troubleshooting

I won't go into much detail on troubleshooting here. There's only one important thing you need to know: if you enabled debug in the Properties tab, you need to use the following command in bash:

?tail -f /var/opt/novell/tomcat4/logs/catalina.out | grep BADEBUG?

If you don't find any BADEBUG entries, check to see if the jar is present on the server and if the Authentication method has been set up correctly. If you see these entries, they will tell what is going wrong:

SMS Gateway error (no credits for this account):

BADEBUG - method doPhase1 called
BADEBUG - method sendSMS called A23EZ1 003211111111
BADEBUG - Request: http://smsgw.lab.ba/DoSend?user=Bart&pas                     sword=RoyalAntwerpFC&to=003211111111&text=A23EZ1&null&null
BADEBUG - SMS gateway output: ERR: No Credit Left

SMS successfully sent:

BADEBUG - method doPhase1 called
BADEBUG - method sendSMS called Z34RE4 003211111111
BADEBUG - Request: http://smsgw.lab.ba/DoSend?user=Bart&pas                     sword=RoyalAntwerpFC&to=003211111111&text=Z34RE4&null&null
BADEBUG - SMS gateway output: Message OK
BADEBUG - Handled Request
BADEBUG - method doPhase2 called
BADEBUG - Authentication Success