Challenge response authentication and PAM

[Damien Miller]

On Wed, 21 Mar 2001, Nigel Metheringham wrote:

> As an experiment I set up Challenge/response authentication on a Linux
> system with PAM using a pam_opie module (this module works fine with
> console logins and su).
>
> I can log into the box using the opie password, *but* it does not give
> me the challenge - which can make things a little tricky :-)
>
> I can well believe this might be a fault in the PAM pam_opie module I
> am using, so has anyone got Challenge/Response authentication working
> under PAM and with the challenge being given?    If so what pam module
> are you using?

Try putting

ChallengeResponseAuthentication yes

in the server config and

Protocol 2
PreferredAuthentications publickey, keyboard-interactive, password

in the client config.

-d

-- 
| Damien Miller <djm at mindrot.org> \ ``E-mail attachments are the poor man's
| http://www.mindrot.org          /   distributed filesystem'' - Dan Geer