Re: [OATH-Toolkit-help] pam_oath and multiple tokens for a user

[Tim Eggleston]

Hi all,

Any thoughts on the below?

Cheers,

 -- Tim


On 2012-05-12 16:14, Tim Eggleston wrote:

> Hello,
>
> Is there a way to have multiple tokens (sets of shared secrets and
> counter values/timestamps in /etc/users.oath) for a single account in
> pam_oath? I have a couple of Yubikeys, a Nano which I keep in my home
> laptop and a normal one which is on my keyring for travelling. I'd 
> love
> to be able to use either token to authenticate myself in a robust way
> (i.e. not just set the "window" parameter to be a really large number
> like 50). Is this possible? I figure it might be do-able by chaining
> together a couple of users.oath files in successive PAM modules, but 
> that
> seems a bit ugly.
>
> Cheers!
>
> -- Tim