This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
аутентификация_с_использованием_opie [2010/09/13 11:50] val |
аутентификация_с_использованием_opie [2021/01/12 10:26] val [Сервис OTPW] |
||
---|---|---|---|
Line 5: | Line 5: | ||
==== Установка ==== | ==== Установка ==== | ||
- | === Ubuntu === | + | === Ubuntu 10.04 === |
<code> | <code> | ||
root@gate:~# apt-get install opie-server | root@gate:~# apt-get install opie-server | ||
</code> | </code> | ||
+ | |||
+ | === Ubuntu/Debian поздних версий === | ||
+ | |||
+ | !!! Отсутствует !!! | ||
+ | |||
==== Инициализация opie для пользователя ==== | ==== Инициализация opie для пользователя ==== | ||
<code> | <code> | ||
- | gate# su user1 | + | gate# su - user1 |
$ opiepasswd -c -f | $ opiepasswd -c -f | ||
... | ... | ||
Line 22: | Line 27: | ||
<code> | <code> | ||
gate# cat /etc/opiekeys | gate# cat /etc/opiekeys | ||
+ | </code><code> | ||
user1 0497 g23394 81a663d5347407bb Oct 19,2006 09:48:53 | user1 0497 g23394 81a663d5347407bb Oct 19,2006 09:48:53 | ||
</code> | </code> | ||
- | |||
===== pam opie для сервиса sshd ===== | ===== pam opie для сервиса sshd ===== | ||
==== FreeBSD ==== | ==== FreeBSD ==== | ||
- | Не требуется настройки | + | |
+ | !!! Не требует настройки !!! | ||
<code> | <code> | ||
[gate:~] # grep opie /etc/pam.d/sshd | [gate:~] # grep opie /etc/pam.d/sshd | ||
+ | </code><code> | ||
auth sufficient pam_opie.so no_warn no_fake_prompts | auth sufficient pam_opie.so no_warn no_fake_prompts | ||
auth requisite pam_opieaccess.so no_warn allow_local | auth requisite pam_opieaccess.so no_warn allow_local | ||
+ | </code><code> | ||
[gate:~] # cat /etc/ssh/sshd_config | [gate:~] # cat /etc/ssh/sshd_config | ||
+ | </code><code> | ||
... | ... | ||
#ChallengeResponseAuthentication yes | #ChallengeResponseAuthentication yes | ||
Line 43: | Line 52: | ||
==== Ubuntu ==== | ==== Ubuntu ==== | ||
<code> | <code> | ||
- | root@gate:~# cat /etc/ssh/sshd_config | + | root@gate:~# cat /etc/ssh/sshd_config |
+ | </code><code> | ||
... | ... | ||
ChallengeResponseAuthentication yes | ChallengeResponseAuthentication yes | ||
... | ... | ||
- | + | </code><code> | |
- | root@gate:~# cat /etc/pam.d/sshd | + | root@gate:~# cat /etc/pam.d/sshd |
+ | </code><code> | ||
... | ... | ||
auth sufficient pam_opie.so | auth sufficient pam_opie.so | ||
# Standard Un*x authentication. | # Standard Un*x authentication. | ||
... | ... | ||
+ | </code><code> | ||
+ | root@gate:~# restart ssh | ||
</code> | </code> | ||
- | ===== Клиент OPIE (unix) ===== | + | ===== Клиент OPIE ===== |
- | ==== Генерация одного пароля ==== | + | |
+ | ==== Unix ==== | ||
+ | |||
+ | === Генерация одного пароля === | ||
<code> | <code> | ||
- | $ opiekey 498 g23394 | + | $ opiekey -f 498 g23394 |
... | ... | ||
Enter secret pass phrase: opiepasswd | Enter secret pass phrase: opiepasswd | ||
PER AND BURT SEE DIVE GILD | PER AND BURT SEE DIVE GILD | ||
</code> | </code> | ||
- | ==== Генерация нескольких паролей ==== | + | |
+ | === Генерация нескольких паролей === | ||
<code> | <code> | ||
- | $ opiekey -n 6 497 g23394 | + | $ opiekey -f -n 6 497 g23394 |
... | ... | ||
Enter secret pass phrase: opiepasswd | Enter secret pass phrase: opiepasswd | ||
Line 73: | Line 90: | ||
</code> | </code> | ||
- | ===== Клиент OPIE (java) ===== | + | ==== J2ME ==== |
- | [[http://sourceforge.net/projects/otp-j2me/]] | + | |
+ | * [[http://sourceforge.net/projects/otp-j2me/|J2ME для телефонов]] | ||
- | ===== Верните настройки в исходное состояние ===== | + | ===== Сервис OTPW ===== |
+ | |||
+ | * [[http://rus-linux.net/MyLDP/sec/SSH-login-with-one-time-passwords.html|Как в Linux получить доступ через SSH с помощью одноразовых паролей]] | ||
+ | * [[https://www.digitalocean.com/community/tutorials/install-and-use-otpw|How To Install and Use OTPW for Single-Use SSH Passwords on Ubuntu 14.04]] | ||
+ | |||
+ | <code> | ||
+ | gate# cat /etc/pam.d/sshd | ||
+ | </code><code> | ||
+ | ... | ||
+ | auth sufficient pam_otpw.so | ||
+ | session optional pam_otpw.so | ||
+ | # Standard Un*x authentication. | ||
+ | @include common-auth | ||
+ | ... | ||
+ | </code><code> | ||
+ | gate# cat /etc/ssh/sshd_config | ||
+ | </code><code> | ||
+ | ... | ||
+ | ChallengeResponseAuthentication yes | ||
+ | ... | ||
+ | </code><code> | ||
+ | student@gate:~$ otpw-gen > nothingtosee.txt | ||
+ | |||
+ | ... | ||
+ | |||
+ | student@gate:~$ rm -r .otpw* | ||
+ | </code> |