[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

difficulties with otpw and sshd



Greetings,

I need help with otpw pam module and sshd.

In a previous post I asked for one-time password PAM module for debian, and
I was directed to optw package and a howto:

http://www.cl.cam.ac.uk/~mgk25/otpw.html

I found optw-bin package in Lenny (via aptitude) and installed it.
Next I changed /etc/pam.d/sshd so it contains only these two rows:


auth       required     pam_otpw.so
session    optional     pam_otpw.so

and generated a .otpw file in the home directory of my user.

But still It didn't worked.
When I tried to log on via ssh client It asked me for the password,
just as when I'm using pam_unix.so (without giving me the number of
the one-time password).
After the unsuccessful login, I read In the /var/log/auth.log
something in the sense that pam_otpw.so
found my password to be wrong.

My best guess is that sshd somehow asks me for the password without
calling on pam at all
and then throws what it expects to be normal password to pam_otpw,
which on its turn
says the password is wrong.

The sshd options mentioned in the OTPW howto solving that very problem
do not appear in the
man page nor in the sample configuration file of sshd. Moreover sshd says that
RSAAuthenticationViaKbdInt is depreciated.

Any ideas?


Reply to: