Pre-authentication with SecurID

Russ Allbery rra at
Wed Aug 18 20:07:31 EDT 2010

"Henry B. Hotz" <hotz at> writes:

> In order to actually use the OTP during a login you will need to modify
> the login process on the machines in question.  Specifically you want to
> use the local host keytab to get a tgt to initialize the FAST exchange
> for the user.  Most likely this means extra features for pam_krb5.  I'm
> sure Russ Albery would be receptive of patches to his pam_krb5, but he
> had not received any the last I asked him.

Sam Hartman sent me patches to support FAST, which have been included in
pam-krb5 4.3.

Russ Allbery (rra at             <>

More information about the krbdev mailing list