search for: authsrv

nuqneH, I've tried using TIS authsrv authentication via bsd auth and found it quite limited. The most important restriction it does not log ip and fqdn of the remote peer, nor the application name, to the authentication server. It does not matter much for TIS authsrv, but since other applications do provide such information, our auths...

Hi, Is there any hope getting openssh to support a sequence of several authentication methods (requiring different passwords) for one login? I.e. take the standard static password, feed it into pam_unix.so for verification, then ask the user for yet another password (e.g. a one-time password) and verify this one by a different PAM module Currently, verifying either a static password or a one time

...ECK_LIB(util, login, AC_DEFINE(HAVE_LIBUTIL_LOGIN) LIBS="$LIBS -lutil") +AC_CHECK_LIB(crypt, crypt) AC_CHECK_FUNC(regcomp, [], @@ -1116,6 +1116,18 @@ ] ) +# Check whether user wants S/Key support +TIS_MSG="no" +AC_ARG_WITH(tis, + [ --with-tis Enable TIS authsrv support, may not be used with --with-skey], + [ + if test "x$withval" != "xno" ; then + AC_DEFINE(TIS_AUTH) + TIS_MSG="yes" + fi + ] +) + # Check whether user wants TCP wrappers support TCPW_MSG="no" AC_ARG_WITH(tcp-wrappers, @@ -1566,6 +1578,7 @@...

...h-2.5.1p2-tis/configure.in --- openssh-2.5.1p2/configure.in Wed Feb 28 23:16:12 2001 +++ openssh-2.5.1p2-tis/configure.in Fri Mar 9 10:13:39 2001 @@ -461,6 +461,18 @@ ] ) +# Check whether user wants TIS support +TIS_MSG="no" +AC_ARG_WITH(tis, + [ --with-tis Enable TIS authsrv support, may not be used with --with-skey], + [ + if test "x$withval" != "xno" ; then + AC_DEFINE(TIS_AUTH) + TIS_MSG="yes" + fi + ] +) + # Check whether user wants TCP wrappers support TCPW_MSG="no" AC_ARG_WITH(tcp-wrappers, @@ -1780,6 +1792,7 @@...

...brary to AIX. The patch includes a pam_aix module to provide backward compatibility to the traditional AIX authentication methods. My main impetus for doing this is that I don't want to continue maintaining my version of the TIS authentication patch for OpenSSH. I've already written a pam_authsrv module which provides TIS authentication to any PAM-aware application. This solved the problem under Solaris, Linux, and HP-UX, but I couldn't ditch the custom patch until I could use the same PAM module under AIX. Now that I can, I have no further need for the custom OpenSSH patch. Both the...

...e client returns a PAM_CONV_ERR. I am trying to write a PAM module that will prompt a user for a second username and a second password in order for the module to succeed so that proper authentication relies on the ability to authenticate against n machines, where n < 1. I looked at the pam_authsrv module, but that appears (I did not compile ad run) to use the supplied username, index against a mapfile, and then use the password supplied by the user to authenticate. So it may not be using kbd-interactive at all, it may just be password. Am I missing something? -- bryan

I have a simple goal: to use PAM to do my TIS authsrv authentications. I have Mark Roth's pam_authsrv module -- it works fine. + I can configure openssh for PAM, and it works fine (negotiating ssh2 keyboard interactive auth method). + I can configure ssh.com-3.0.1 for PAM, and it also works fine (negotiating ssh2 pam-1 at ssh.com auth method)...