GitHub - dorchain/pam_cut: cut off parts of the passwords in a pam stack

dorchain / pam_cut Public

Notifications You must be signed in to change notification settings
Fork 0
Star 0

cut off parts of the passwords in a pam stack

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 5 Commits
.gitignore		.gitignore
LICENSE		LICENSE
Makefile		Makefile
README		README
pam_cut.c		pam_cut.c

Repository files navigation

pam_cut
=======

Cuts off the last n (default: 44) characters of a password in the
pam stack.

Intended use is authentication with pam and yubikeys, where you
enter a static part and a OTP concatenated. The static part is
ignored by yubikey authenticator, but the static part
authenticator is confused by the OTP.

Sample useage (static part via ldap + yubikey OTP via radius)

auth required pam_radius_auth.so debug # OTP with radius
auth required pam_cut.so # to cut off the otp part
auth required pam_ldap.so try_first_pass # against AD