Re: [OATH-Toolkit-help] One Time Password in SLiM

[Simon Josefsson]

Christian Hesse <address@hidden> writes:

>> How does xscreensaver/pam_unix solve this for e.g. /etc/shadow?
>
> I took a deeper look at pam_unix and unix_chkpwd. pam_unix always calls
> unix_chkpwd via execev() to authenticate the user.
> I'm not sure I could implement this for pam_oath... Is anybody willing to do
> this? I will take a deeper look if I have some spare time.

We could add a setuid wrapper to do this, but I wonder if there aren't
better solutions.  I can't immediately think of any good solution
though...  maybe a system-wide daemon running that some client code
could talk to?  That is a bit complex though.

/Simon