[OATH-Toolkit-help] different users with one token

[Christian Hesse]

Hello everybody,

I do use one token to authenticate my user account and the administrative
account root. Now there is a security concern about this configuration: The
same one time password can be used to authenticate one, then the other user.
Is this by design or should all counters for one specific token in users file
be increased regardless of user?
-- 
main(a){char*c=/*    Schoene Gruesse                         */"B?IJj;MEH"
"CX:;",b;for(a/*    Chris           get my mail address:    */=0;b=c[a++];)
putchar(b-1/(/*               gcc -o sig sig.c && ./sig    */b/42*2-3)*42);}

signature.asc
Description: PGP signature