Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
PAM S/Key module
C

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
CVS
autoconf
contrib
sample
COPYING
ChangeLog
INSTALL
Makefile.in
README
RELEASENOTES
TODO
configure
defs.h.in
misc.h.in
pam_skey.c
pam_skey.h
pam_skey_access.c

README

$Id: README,v 1.11 2001/04/12 21:25:14 kreator Exp $

About
-----
This is complete pam_skey modul as interface to existing S/Key
library/interface by Wietse Venema. So far it has been tested on Linux
(Debian potato, Debian woody and Debian sid), Solaris 2.6, 2.7 and 2.8. I
have reason to believe it will work where PAM implementation exists and is
properly done. It provides `auth' services only. It can use tokens from
PAM_AUTHTOK to implement flexibile module stacking.
NOTE: You *absolutely* need libskey to make this module working. I
recommend original logdaemon suite by Wietse Venema - you can find it in
logdaemon-5.10 package.

This suite consists of following modules:
pam_skey.so           - Main module than by default contains routines for
                        checking skey.access for access rules
pam_skey_access.so    - Add-on module that is useful only when it is
                        required (requisite) module after pam_skey, which
                        means skey.access controls future loading of other
                        modules. Note that this emulates behavior of
                        original Venema's skeylogin.

Known problems
--------------
Note that there are several problems with existing (original) Wietse
Venema's implementation - no flock() on keys file, hairy host checking
code in skeyaccess(), etc. If there is any other library function and
parametric compatible with S/Key library, this will most probably work
with it, too. I am planning to re-implement S/Key library later, having
Venema's and Linux-skey package as main resources.

Known bugs
----------
None reported so far. That does not mean there are none: if you find any
bug, or something that is likely to be bug, try to exactly see what
happens using `debug' option in local pam configuration file and e-mail me
together with console and syslog information. Or at least e-mail me with
feedback that can help to trace problems.

Installation
------------
Please please please, for installation instructions look closely at
INSTALL file.

Literature and other sources
----------------------------
I find most helpful was Linux-PAM documentation. I had also a peek into
following sources:
  Wietse Venema's logdaemon package
  Olaf Kirch's Linux S/Key package
  Wyman Miles' pam_securid module
  Linux-PAM modules and templates

Contact
-------
I am including my public PGP keys if anyone decides to write me something
highly confidential or private. E-mail address is kreator@fly.srk.fer.hr
I usually respond e-mails within a couple of hours, perhaps one day.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.3i

mQBtAzhopNcAAAEDAKyozUXB2XQe/oTtK7O9/RgkV2YcR+Q4tJOxXXxeU0DrYU0n
uV3snpyVmDC2lmqu2b8mTBq+PuMcShWOQWrdwCCthzoSgypP+AwNlyaxv7rsSscn
pfwcpfihx/d0bAP2YQAFEbQmRGlua28gS29ydW5pYyA8a3JlYXRvckBmbHkuc3Jr
LmZlci5ocj6JAHUDBRA4aKTXocf3dGwD9mEBAcHXAwCBMglNS54Inzcm2ZCUwVsj
BcISQd+rhoHwAjUdolA9QBqkjmxlO8ymcCrJg06z30wI1LjHPTNs0zb0Cj57ap3s
SRW7ghkExKOgNuKMPF4tL1ZVxzxePyntqATc2zTisfo=
=potB
-----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP 6.5.1
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=wxUv
-----END PGP PUBLIC KEY BLOCK-----

Something went wrong with that request. Please try again.