LinOTP PAM module (fork which allows proxy support)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 

1.5 KiB

#
# linotp-auth-pam - LinOTP PAM module
# Copyright (C) 2010 - 2017 KeyIdentity GmbH
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
# E-mail: linotp@keyidentity.com
# Contact: www.linotp.org
# Support: www.keyidentity.com
#


This is the LinOTP pam module, which will send the username and
password - including otp - to the LinOTP-server to verify.

Thus you can login via OTP to every service that supports pam.

copy your /etc/pam.d/common_auth to something like /etc/pam.d/linotp_auth and replace the line
auth ...... pam_unix.so

with
auth ...... pam_linotp.so

Now you can use the
@include linotp_auth
in every service you want to authenticate with OTP.

Config options to be set in the pam configuration:
url=http://localhost:5001/validate/simplecheck
nosslhostnameverify
nosslcertverify
realm=<yourRealm>
resConf=<specialResolverConfig>


Have fun.