Pre-authentication with SecurID

[Russ Allbery]

"Henry B. Hotz" <hotz at jpl.nasa.gov> writes:

> In order to actually use the OTP during a login you will need to modify
> the login process on the machines in question.  Specifically you want to
> use the local host keytab to get a tgt to initialize the FAST exchange
> for the user.  Most likely this means extra features for pam_krb5.  I'm
> sure Russ Albery would be receptive of patches to his pam_krb5, but he
> had not received any the last I asked him.

Sam Hartman sent me patches to support FAST, which have been included in
pam-krb5 4.3.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>