nam-smstoken

SMS token authentication class for NetIQ Access Manager.

This class is intended to be a addition to another authentication class. E.g. in conjunction with the
Secure Name/Password - Form class.

Install

Download the jar (nam-smstoken-x.x.x.jar) from lastest and copy it to
/opt/novell/nam/idp/webapps/nidp/WEB-INF/lib. See Deploying Your Authentication Class
in the NetIQ documentation for more information.

# Replace the url with the latest url
$ wget https://github.com/Rogaland/nam-smstoken/releases/download/v1.2.0/nam-smstoken-1.2.0.jar
$ cp nam-smstoken-1.2.0.jar /opt/novell/nam/idp/webapps/nidp/WEB-INF/lib

In the Create Authentication Class dialog use the following settings:

Name	Value
Display name	A descriptive name
Java class	`Other`
Java class path	`no.rogfk.nam.idp.SMSTokenAuthenticationClass`

Create a token.jsp file. See the example in the pages directory of this project. You can use what ever filename on the
JSP file you want. Just specify the JSP property on class or method.

Configuration parameters

Parameter	Required	Default value	Description	Example
trace	`false`	`false`	Debug logging to `catalina.out`
allowSessionUser	`false`	`false`	Indicates if we should look for session user	`true` / `false`
phoneAttribute	`false`	`mobile`	The name of the mobile LDAP attribute	`mobileNumber`
charsToken	`false`	`1234567890`	Characters to be used when generating `token`	`1234567890`
lengthToken	`false`	`4`	Lenght of the `token`	`4`
missingMobileMessage	`true`		The message to be shown if no mobile number is found for the user	`Unable to find a mobile number for your user. Goto <a href="https://me.site.com/mobile">Update you mobilenumber</a>`
gatewayDestName	`true`		Name of the URL parameter for the destination mobilenumber	`sMobile`
gatewayError	`true`		String or regular expression to look for in the gateway response if the gateway wasn’t able to send the SMS	`false`
gatewayErrorRegex	`false`	`false`	`false` = line contains check. `true` = regular expression check	`true` / `false`
gatewaySuccess	`true`		String or regular expression to look for in the gateway response if the gateway successfully sent the SMS	`true`
gatewaySuccessRegex	`false`	`false`	`false` = line contains check. `true` = regular expression check	`true` / `false`
gatewayMessageName	`true`		Name of the URL parameter for the message	`sMessage`
gatewayURL	`true`		Endpoint to the SMS gateway	`https://gateway.sms.org/SendSMS`
gatewayPasswordParameter	`true`		The URL parameter for the gateway password	`sPassword=topsecret`
gatewayUserParameter	`true`		The URL parameter for the gateway username	`sUser=smsuser`
gatewayExtraParameter1	`false`		The URL parameter for extra parameter	`extraParam=value`
gatewayExtraParameter2	`false`		The URL parameter for extra parameter	`extraParam=value`

Build from source

The documentation from NetIQ
states that you need NAMCommon.jar and nidp.jar to build the authentication class. This project has extensively
testing so you will also need to copy these jar‘s from /opt/novell/nam/idp/webapps/nidp/WEB-INF/lib into the netiq
folder of the project to be able to build:

jcc.jar
jgroups-all.jar
jsso.jar
nxpe.jar

References

Identity Server Authentication API