Re: One-Time passwords for regular user accounts?

John Thompson wrote:

I wonder if there is a way (a standard way, that is) to setup
one-time passwords for logging in to a Linux box (through SSH).

Search google on "opie" (one-time passwords in everything) and "S/KEY"

Hmmm... The information seems a bit scarce. But still, from one of
the descriptions I read, it seems to be resistant to sniffing attacks,
and not to key loggers. But using SSH -- which I do -- makes me
already impervious to sniffing.

My concern is that I do not trust the keyboard where I'm typing my
password -- that's why I would like the server to have a list of
passwords ready to use, and as soon as one of them is used, it is
immediately removed from that list.

Am I getting it wrong?

Thanks,

Carlos
--
.

Relevant Pages

  • Re: One-Time passwords for regular user accounts?
    ... one-time passwords for logging in to a Linux box. ... the descriptions I read, it seems to be resistant to sniffing attacks, ... it is also resistant to key loggers. ... Precisely what Opie does, it ia more subtle and orgnaized fashion. ...
    (comp.os.linux.setup)
  • UPDATE Re: rlogin - security question [expanded to smartcard technology]
    ... explinations of ssh etc. ... 0-13-100092-6) with the words "The Official Sun Microsystems Resource ... place root / users cannot set/change passwords. ... > we are required to allow rlogin access to all by means of .rhosts files. ...
    (SunManagers)
  • Re: S: ssh worms FAQ
    ... > There is many ssh worms in the Internet since this summer. ... weak passwords with BS accounts like "test" and "guest". ... and had larger lists of passwords. ... frequently loaded with copies of Linux viruses RST (the Remote Shell ...
    (comp.os.linux.security)
  • Re: how to react on ssh attacks?
    ... >>I recently checked my log files of my ssh service (so far as I ... >passwords, and then common user names with a bunch of passwords. ... >It's not really something to worry about - if you have root login ... >requires a key on the connecting machine that has been signed by your ...
    (Fedora)
  • Re: Is ssh not safe?
    ... I use my server PC for web ... > that they can log in and change their passwords if need be. ... As long as you are using ssh version 2 (normally an option on the server ... added benefit that you will only need to have port 22 open for ssh since ...
    (Fedora)