Challenge response authentication and PAM

Damien Miller djm at
Thu Mar 22 09:02:34 EST 2001

On Wed, 21 Mar 2001, Nigel Metheringham wrote:

> As an experiment I set up Challenge/response authentication on a Linux
> system with PAM using a pam_opie module (this module works fine with
> console logins and su).
> I can log into the box using the opie password, *but* it does not give
> me the challenge - which can make things a little tricky :-)
> I can well believe this might be a fault in the PAM pam_opie module I
> am using, so has anyone got Challenge/Response authentication working
> under PAM and with the challenge being given?    If so what pam module
> are you using?

Try putting

ChallengeResponseAuthentication yes

in the server config and

Protocol 2
PreferredAuthentications publickey, keyboard-interactive, password

in the client config.


| Damien Miller <djm at> \ ``E-mail attachments are the poor man's
|          /   distributed filesystem'' - Dan Geer

More information about the openssh-unix-dev mailing list