Re: [gentoo-hardened] OPIE (Onetime Passwords In Everything)

[Timo Boettcher]

Hi Daniel,

Nachricht vom Donnerstag, 19. Juni 2003, 20:41:20:

> Hello,


> Are there any efforts made to provide gentoo with alternative way of
> logging in?

> I am currently researching methods how I can authenticate users
> within a LAMP-system (Linux Apache Mysql PHP) and I came across One-time passwords.

> There does exist OPIE for Unix, which allows on a software basis to
> log into the machine with onetime passwords.

> Although it is important to harden the software basis, to provide a
> secure environment, wouldn't it also be important to also provide a
> safer means of authenticating the users?

> So, I just wanted to know if there are any research made to provide
> gentoo with alternative ways of authenticating users, maybe also by
> smartcards / etokens, ...?

I was thinking about generating time-based passwords (lets say
md5(now()+"secret")) with a java-enabled cellphone...


 Timo


--
gentoo-hardened@g.o mailing list