Аутентификация с использованием OPIE

root@gate:~# apt-get install opie-server

• !!! Отсутствует !!!

• Входит в состав базового ПО

user1$ opiepasswd -c -f
...
Enter new secret pass phrase: opassword1
Again new secret pass phrase: opassword1
...

gate# cat /etc/opiekeys

user1 0497 g23394           81a663d5347407bb  Oct 19,2006 09:48:53

[gate:~] # grep opie /etc/pam.d/sshd

auth            sufficient      pam_opie.so             no_warn no_fake_prompts
auth            requisite       pam_opieaccess.so       no_warn allow_local

[gate:~] # cat /etc/ssh/sshd_config

...
ChallengeResponseAuthentication yes
...

• Из каких сетей можно подключаться UNIX паролем

[gate:~] # cat /etc/opieaccess

...
permit 192.168.0.0 255.255.0.0
...

root@gate:~# cat /etc/ssh/sshd_config

...
ChallengeResponseAuthentication yes
...

root@gate:~# cat /etc/pam.d/sshd

...
auth    sufficient      pam_opie.so
# Standard Un*x authentication.
...

root@gate:~# restart ssh

$ opiekey -f 498 g23394
...
Enter secret pass phrase: opiepasswd
PER AND BURT SEE DIVE GILD

$ opiekey -f -n 6 497 g23394
...
Enter secret pass phrase: opiepasswd
492: AURA BATH MAUL WASH OWN FIST
...
497: FLAG PEP VOID CODA TIC SKID

• otp-j2me для телефонов
• OTPdroid

• Как в Linux получить доступ через SSH с помощью одноразовых паролей
• How To Install and Use OTPW for Single-Use SSH Passwords on Ubuntu 14.04

gate# cat /etc/pam.d/sshd

...
auth    sufficient    pam_otpw.so
session optional    pam_otpw.so
# Standard Un*x authentication.
@include common-auth
...

gate# cat /etc/ssh/sshd_config

...
ChallengeResponseAuthentication yes
...

student@gate:~$ otpw-gen > nothingtosee.txt

...

student@gate:~$ rm -r .otpw*