Re: One-Time Password system and OpenSSH

I recently implemented OPIE (one time password in everyting).

For external users over SSH users must authenticate with OPIE, but when on the internal network they use regular pub/private key authentication.

I set up two SSHd, one on port 22 the other on 2222, port 22 allows the pub/private authentication mechanism, the service on 2222 is OPIE only!

I think it works great and once users are use to entering a passphrase/sequence number they soon stop complaining. Anyway the moaning is far out weighed by the stronger authentication i reckon.

We use a java based OPIE calculator that will be installed on to users mobile phones.

andy Received on Mon Apr 21 17:56:25 2003