Hi, I would like to do some development on the securid patch to get it to display the passcode prompt when users log in with securid on ssh. Can anyone tell me which scripts currently handle the logon/password prompt in openssh please? Thanks, JS. _________________________________________________________________ Join the world?s largest e-mail service with MSN Hotmail. http://www.hotmail.com
On Mon, 5 Aug 2002, J S wrote:> I would like to do some development on the securid patch to get it to > display the passcode prompt when users log in with securid on ssh. > > Can anyone tell me which scripts currently handle the logon/password prompt > in openssh please?shouldn't securid use keyboard interactive, which I believe can handle different change-response prompts, instead? jakob
In that case why is there a securid patch for openssh? Also I've tried setting 'PAMAuthenticationViaKbdInt yes' but that doesn't work, I still get the password prompt.> >On Mon, Aug 05, 2002 at 11:38:54PM +0200, Jakob Schlyter wrote: > > On Mon, 5 Aug 2002, J S wrote: > > > > > I would like to do some development on the securid patch to get it to > > > display the passcode prompt when users log in with securid on ssh. > > > > > > Can anyone tell me which scripts currently handle the logon/password >prompt > > > in openssh please? > > > > shouldn't securid use keyboard interactive, which I believe can > > handle different change-response prompts, instead? > >yes, it should. it should not depend on the client. >_______________________________________________ >openssh-unix-dev at mindrot.org mailing list >http://www.mindrot.org/mailman/listinfo/openssh-unix-dev_________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com
OK I got it to work now, by setting the following options in the config: PermitEmptyPasswords yes KbdInteractiveAuthentication yes However the KbdInteractiveAuthentication line doesn't seem to come as part of the openssh build. Is there a reason for that? JS. _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com
Should keyboard interactive work with scp and sftp for securid as well then? JS. _________________________________________________________________ Join the world?s largest e-mail service with MSN Hotmail. http://www.hotmail.com
On Tue, Aug 06, 2002 at 12:01:28PM +0000, J S wrote:> Should keyboard interactive work with scp and sftp for securid as well then?yes, but it depends on whether the server does speak keyboard interactive .
Markus, Thanks for your help on this. I'm not sure whether I understood your answer though. The keyboard interactive is switched on in the sshd_config, and I've got passcode prompts working now with ssh but scp and sftp cut out before I can connect. Is there someway to switch keyboard interactive on for the sftp-server?>On Tue, Aug 06, 2002 at 12:01:28PM +0000, J S wrote: > > Should keyboard interactive work with scp and sftp for securid as well >then? > >yes, but it depends on whether the server does speak keyboard interactive ._________________________________________________________________ MSN Photos is the easiest way to share and print your photos: http://photos.msn.com/support/worldwide.aspx
I can't see any way to get scp/sftp to work with keyboard interactive, so think I'll have to go back to my original plan which was to try and fix the securid patch to get it to display the passcode prompt. Assuming non keyboard-interactive then, could someone tell me where in the openssh code, the current password prompt gets created/called from please? Many thanks, JS. Markus, Thanks for your help on this. I'm not sure whether I understood your answer though. The keyboard interactive is switched on in the sshd_config, and I've got passcode prompts working now with ssh but scp and sftp cut out before I can connect. Is there someway to switch keyboard interactive on for the sftp-server?>On Tue, Aug 06, 2002 at 12:01:28PM +0000, J S wrote: > > Should keyboard interactive work with scp and sftp for securid as well >then? > >yes, but it depends on whether the server does speak keyboard interactive ._________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com