NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: skey



When i try to login is just says login incorrect and refused on this
terminal

On Mon, 2025-05-19 at 18:01 +0200, Martin Neitzel wrote:
> BC> I can't figure out how to use the skey login for telnet
> 
> It's pretty simple.
> 
> (1.) Make sure you have telnet enabled, typically by uncommenting
>      it in /etc/inetd.conf and "pkill -1 inetd".
> 
> (2.) As the user who wants to make use of SKEYs, run  skeyinit  once.
>      You don't need any parameters.
>      You will have to provide some "secret password" used as some of
> the
>      generators of the SKEY sequences.  You can simply reuse your
>      standard login password or choose a new secret.
> 
>      skeyinit   will end with some info like:
> 
>         ID cartwright skey is otp-md4 100 hack123456
>         Next login password: DIRT THUD ABLE IFFY ROVE FUD
> 
> The above is the login access for the first, skey-based login coming
> up next, identified by a series id (hack123456) and running number
> (100, 99, 98, ...) .  You will very likely be interested in a
> slightly longer list of the upcoming skeys phrases.  Get this by
> entering:
> 
>         skey -n 10  100 hack123456
> 
> and your secret when prompted.  You can recreate the list any time.
> Later on you would be interested in the list going from, say, 90 -
> 80.
> 
> (3.) After your skeyinit, login prompts in telnet, rlogin, slogin,
> and
>      you console (whatever is making use of the skey PAM module) will
> look
>      like this:
> 
>         Password [ otp-md4 100 hack123456 ]: ____
> 
>      At this point you can either use either your standard password
> or
>      use & burn the next SKEY phrase from you list.  For the
>      "100 hack123456" identifier, you could enter "dirt thud able
> iffy
>      rove fud" (case doesn't matter), and after have used this, you
>      would be prompted with "Password [ otp-md4 99 hack123456 ]:"
>      and could use the "99" phrase.
> 
> The beautiful thing is that you can switch between you standard login
> password and an skey phrase any time.  You don't have to commit to
> skeys completely by using them once.  Give it a try!
> 
>                                                         HTH, Martin



Home | Main Index | Thread Index | Old Index