[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: OTP (opie) and ssh

Lots of people are replying about the advantages/disadvantages of
using ssh **OR** otp. I fully agree; in fact I installed both here.

What I said is that it's nonsense to use ssh **AND** otp at the same
time, for the same login. If I understood correctly, Peter's setup of
ssh-pam would use otp for the ssh login. Did I miss something?

<asbestos suit>
Furthermore I usually recompile ssh without pam, because ssh is not
just a login protocol. Perhaps this could help Peter.

I also don't like the hack of making ssh refuse logins for valid RSA
keys (I only use them, no plain passwords) by just putting an invalid
password in /etc/passwd. I'm not sure this was done to ssh-nonfree,
but I think it was for openssh.

</asbestos suit>

On the subject of authentication, I'd much like to have an
authentication daemon (not running as root, preferably) that receives
a login/password and says yes or no. I could use it for granting
access to certain directories and other things. Can ldap do this? I
thought about the ldap-pam module, but haven't explored it.

Reply to: