Questions tagged [otp]

A one-time password (OTP) is a password that is valid for only one login session, on a computer system. OTPs avoid many shortcomings associated with static password-based authentication.

6 questions
3
votes
1 answer

SSH Publickey+TOTP and Password+TOTP simultaneously

I am trying to setup an SSH server where some users prefer to use an SSH key but others prefer LDAP provided passwords. I found out that I can set in sshd_config for publickey + PAM or PAM only authentication. AuthenticationMethods…
yurtesen
  • 538
  • 4
  • 9
2
votes
0 answers

How to generate OTP codes offline by Security Key in Debian?

Assume you need the OTPs by devices which are separate from the Debian system which generates the codes. Here, the U2F does not work in all cases so I need OTPs. I am trying to add offline OTP functionality by YubiKey Neo in Debian. My idea: have…
Léo Léopold Hertz 준영
  • 6,788
  • 29
  • 91
  • 193
1
vote
0 answers

Yubikey PIV not working without OTP

I just started using a Yubikey to do SSH logins by following this guide. It works fine - but only as long as the Yubikey is able to do OTP. After a few accidental touches on the key spewing a random string into places I don't want it I figured I…
azzid
  • 938
  • 2
  • 9
  • 24
0
votes
0 answers

What is the best way to make LDAP based TOTP only required in some cases?

I have a 2FA setup on my network for certain kinds of authentication, but not others. The way it currently works is a combination of pam_ldap for passwords, and pam_oath for TOTP. PAM is configured in a way that it requires only pam_ldap for local…
stribika
  • 5,374
  • 5
  • 30
  • 35
0
votes
0 answers

Does google authenticator supports time step more than 30sec?

I have generated a QR from here https://freeotp.github.io/qrcode.html defining a time period of 60sec and while scanning QR-Code through google authenticator app it uses the default time step of only 30seconds. Does google authenticator support a…
BDN
  • 341
  • 2
  • 14
0
votes
1 answer

MultiOTP with freeradius wrong

I running freeradius 3.* on my server with The MultiOTP Version is 4.3.1.1 and for configuring FreeRADIUS I have used this guide: http://wiki.freeradius.org/guide/multiOTP-HOWTO and when I use radiusd -X the worng is just like this whith my…
zore lu
  • 45
  • 1
  • 6