[OATH-Toolkit-help] pam_oath and pam_unix' try_first_pass

[Christian Hesse]

Hello everybody,

This is from man pam_unix:
> try_first_pass
>            Before prompting the user for their password, the module first
> tries the previous stacked module's password in case that satisfies this
> module as well.

I think pam_oath has a similar option.
So I tested with these in my pam configuration:

auth sufficient pam_unix.so
-auth required pam_oath.so usersfile=/etc/users.oath digits=6 try_first_pass

and

-auth sufficient pam_oath.so usersfile=/etc/users.oath digits=6
auth required pam_unix.so try_first_pass

My understanding is that I get one prompt that accepts unix and oath
password. But obviously this does not work, authentication fails for the line
containing try_first_pass.
Anything I misunderstood? How is this expected to work?
-- 
main(a,b){char*/*    Schoene Gruesse                         */c="B?IJj;M"
"EHCX:;";for(a/*    Chris           get my mail address:    */=0;b=c[a++];)
putchar(b-1/(/*               gcc -o sig sig.c && ./sig    */b/42*2-3)*42);}