Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 05 Aug 2001 15:44:31 +0100
From:      Mark Murray <mark@grondar.za>
To:        "Andrey A. Chernov" <ache@nagual.pp.ru>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/lib/libopie Makefile 
Message-ID:  <200108051444.f75EiVZ04340@grimreaper.grondar.za>
In-Reply-To: <20010805024631.B36079@nagual.pp.ru> ; from "Andrey A. Chernov" <ache@nagual.pp.ru>  "Sun, 05 Aug 2001 02:46:34 %2B0400."
References:  <20010805024631.B36079@nagual.pp.ru> 

next in thread | previous in thread | raw e-mail | index | archive | help
> On Sat, Aug 04, 2001 at 15:06:05 +0100, Mark Murray wrote:
> > I didn't have a problem enabling this? If you are talking about
> > opiekey(1) or any other OPIE key calculator, you need to be running
> > that on the client machine.
> 
> No, I talk about FTP tunneling via SSH. In this mode connection is secure
> and OTP is not required, as for localhost. FTPD get connection locally and
> not from localhost address but with address the host connected (i.e. the
> same machine, but different addresses, they must be in /etc/opieaccess).

I'm having a problem parsing this.

> > > Otherwise it is not possible to use OPIE in SSH connections which are more
> > > common nowdays than ever telnet connections.
> 
> opiepasswd and opiekey are not functional via SSH, -f can't be specified.

You can enable -f by building your world with "WANT_INSECURE_OPIE=true".

> opiepasswd:  user can't change its own password when count dropped to 0. 

Sounds like you either need to manage passwords better or that you need
WANT_INSECURE_OPIE.

> opiekey: sometimes it is not possible to run opiekey locally, assume X
> terminal or connection from internet-cafe. But it is possible via SSH. 

I understand the X Terminal problem, and I'm hoping to fix it. For the
rest, I have to repeat that it loooks like you need to build your world
with WANT_INSECURE_OPIE set to "true".

M
-- 
Mark Murray
Warning: this .sig is umop ap!sdn

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200108051444.f75EiVZ04340>