On Tue, 07 Dec 2010 09:35:24 +0800, Magicloud Magiclouds wrote:
> Hi,
> I installed libpam-otpw a few days ago and configured it as:
> --- /etc/ssh/sshd_config ---
> UsePrivilegeSeparation no
> ChallengeResponseAuthentication yes
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Shouldn't that be set to "no"? :-?
> --- /etc/pam.d/sshd ---
> #...@include common-auth
> auth required pam_otpw.so
> session optional pam_otpw.so
>
> Now when I login, it prompt me for the one time password. But if I
> just press Enter for three times, it asks me for normal password again.
> Is this correct, or my configuration is wrong?
Hmmm... so you want to completely avoid pam logins within sshd and
enforce a one-time-password policy? I think you could fall into troubles
if you can't get a renewed key-combo and you lost your ssh connection/
link.
There are some settings you can try in your "/etc/ssh/sshd" ("UsePAM no"
and "PasswordAuthentication no") but *be very careful with these* and *do
not change them* unless you have physical access to the server or you can
get stuck and not able to login remotely :-/
Greetings,
--
Camaleón
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/pan.2010.12.07.11.09...@gmail.com
