[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Kerberos tickets and one time passwords

To: Onime Clement <onime@ictp.trieste.it>
Subject: Re: Kerberos tickets and one time passwords
From: Brian May <bam@snoopy.apana.org.au>
Date: Sat, 1 Mar 2003 10:28:12 +1100
Cc: Andreas Haupt <ahaupt@ifh.de>, heimdal-discuss@sics.se
In-Reply-To: <Pine.LNX.4.44.0302281054320.20635-100000@scs-onime.ictp.trieste.it>
References: <Pine.LNX.4.51.0302281020110.15855@juno.ifh.de> <Pine.LNX.4.44.0302281054320.20635-100000@scs-onime.ictp.trieste.it>
Sender: owner-heimdal-discuss@sics.se
User-Agent: Mutt/1.3.28i

On Fri, Feb 28, 2003 at 10:57:24AM +0100, Onime Clement wrote:
> Another idea is to use PAM, if your system supports it! then you won't 
> even have to modify login/telnetd. A pam session module could run kinit 
> and then afslog or aklog only after the one time password is accepted.

The login client supplied with Heimdal doesn't support PAM
(at least last time I checked).

You could use the login that comes with your OS instead, but I am not
sure how to get OTP support working.
-- 
Brian May <bam@snoopy.apana.org.au>

Next by Date: kdc not binding correctly
Next by thread: Re: Kerberos tickets and one time passwords
Index(es):
- Date
- Thread