From owner-freebsd-current  Mon Jan 21 10:13:37 2002
Delivered-To: freebsd-current@freebsd.org
Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42])
	by hub.freebsd.org (Postfix) with ESMTP id 1357F37B405
	for <current@FreeBSD.ORG>; Mon, 21 Jan 2002 10:13:27 -0800 (PST)
Received: (from ache@localhost)
	by nagual.pp.ru (8.11.6/8.11.6) id g0LIDKt39469;
	Mon, 21 Jan 2002 21:13:20 +0300 (MSK)
	(envelope-from ache)
Date: Mon, 21 Jan 2002 21:13:19 +0300
From: "Andrey A. Chernov" <ache@nagual.pp.ru>
To: Dag-Erling Smorgrav <des@ofug.org>
Cc: mark@grondar.za, current@FreeBSD.ORG
Subject: Re: Step6, corresponding /etc/pam.d/* fixes for review
Message-ID: <20020121181318.GA39364@nagual.pp.ru>
References: <20020121142038.GA36519@nagual.pp.ru> <xzpsn8zwwey.fsf@flood.ping.uio.no> <20020121154244.GC37234@nagual.pp.ru> <xzpbsfnwvfz.fsf@flood.ping.uio.no> <20020121161534.GE37234@nagual.pp.ru> <xzpu1tfvfib.fsf@flood.ping.uio.no> <20020121162726.GH37234@nagual.pp.ru> <xzplmervds6.fsf@flood.ping.uio.no> <20020121172526.GB38390@nagual.pp.ru> <xzp7kqbvbpe.fsf@flood.ping.uio.no>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <xzp7kqbvbpe.fsf@flood.ping.uio.no>
User-Agent: Mutt/1.3.24i
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

On Mon, Jan 21, 2002 at 18:46:37 +0100, Dag-Erling Smorgrav wrote:
> 
> Assuming no ~des/.opiealways,
> 
>  - without the change:
> 
> des@des ~% login des
> otp-md5 496 de6973 ext
> Password: <enter>
> otp-md5 496 de6973 ext
> Password [echo on]: <enter>
> Login incorrect
> login: <argh!>


It looks like right variant. _By_default_ OPIE user is unable to enter 
Unix password. You need to add
permit <your.ip.addr> 255.255.255.255
line to /etc/opieaccess to _allow_ Unix passwords on your machine.

> 
>  - with the change:
> 
> des@des ~% login des
> otp-md5 496 de6973 ext
> Password: <enter>
> otp-md5 496 de6973 ext
> Password [echo on]: <enter>
> Password: <Unix password>

It looks like wrong variant: 3 prompts instead of 2 ones. There is only 2
prompts for all possible cases in OPIE. Unix password can be entered on
first or on second prompt (i.e. with [echo on]), if _allowed_.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message