pptp vpn about google-authenticator HOT 3 CLOSED

Comment #1 originally posted by [email protected] on 2011-03-09T21:09:04.000Z:

My best bet is that this feature request requires at least:

a) teaching PPTP and Samba to use PAM. This is clearly outside of the scope of this project and would need to be filed as a feature request with those projects, and

b) make our PAM module compatible with the more restricted semantics of PPTP and Samba authentication. As best as I can tell, this is identical to the request in bug # 39. So, I am merging with that bug.

It is quite possible that PPTP and Samba have additional protocol constraints that make all of this impossible. But I don't know enough about either project. If there are specific feature requests that either project have from us, please file those as separate issues and we'll see what we can do.

from google-authenticator.

Comment #2 originally posted by Abubakar.Masood on 2011-03-09T21:39:35.000Z:

I have been trying to make this possible but it looks like PAM cannot be used with MS CHAP V2 encryption process. It is possible to use PAM with another encryption process which can be used by pptp, but its less secure. So now I am stuck on a dilemma of what should be done.

from google-authenticator.

Comment #3 originally posted by tore.lonoy on 2011-11-13T16:49:13.000Z:

Yubico has implemented this in their PAM module. When you authenticate, you provide both password and one-time-pass.

E.g. password is "foo1234", and one-time-key is "abcd", you would log in with "foo1234abcd". Yubico's PAM would then cut "foo1234", validate "abcd", and if the validation is SUCCESS it will return "foo1234" to the next PAM module, e.g. pam_unix.so. You need to add the switch "use_first_pass" for pam_unix.so

from google-authenticator.