search for: tisviapam

Here is a patch that does TIS auth via PAM. It's controlled by a switch in the sshd_config. You'd use it by having a PAM module that sets PAM_PROMPT_ECHO_ON. eg, you could use it with pam_skey or pam_smxs. The patch is against the 2.9.9p2 distribution. I'm not on the list, a reply if this patch is accepted would be great. (But not required, I know some folks have a distaste for

...uot;backend", eg you could do x9.9 tokens with protocol 1. It's a little bit less flexible if you have a server you want to be capable of doing either C/R or password. You can't do both via PAM in protocol 1. But the patch doesn't *break* doing both, you need merely turn off the TISviaPAM option and you are limited to the builtin S/Key for C/R. I hope this cut/pastes ok. This also fixes a bug in the current TIS handling, it turns echo on when doing TIS. diff -uNr openssh-3.0.2p1.orig/auth-pam.c openssh-3.0.2p1/auth-pam.c --- openssh-3.0.2p1.orig/auth-pam.c Fri Nov 9 12:22:17 200...