LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 07-09-2011, 02:51 PM   #1
jago25_98
Member
 
Registered: Jun 2001
Posts: 302

Rep: Reputation: 30
Stop pam_ppp.so list from rotating!


The idea of a one time password is for it to be used once.

But pam_ppp.so in /etc/pam.d/sshd goes through from the start of the one time password list if it gets to the end of the list of passwords, rendering it useless because an attacker could simply skip through the passwords until they get back to the one they keylogged.

How can this be disabled?
 
Old 07-10-2011, 08:22 AM   #2
jago25_98
Member
 
Registered: Jun 2001
Posts: 302

Original Poster
Rep: Reputation: 30
The answer is a patch from here:
http://code.google.com/p/ppp-pam/iss...23#makechanges
 
Old 07-11-2011, 06:38 AM   #3
JZL240I-U
Senior Member
 
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,629

Rep: Reputation: Disabled
If it is completely solved, please mark the thread accordingly via the "thread tools" menu. Thanks.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Logs not rotating Arty Ziff Linux - Server 5 01-04-2011 01:51 AM
'E:Malformed line 54 in source list /etc/apt/sources.list (dist parse), E:The list of vsssuccess@gmail.com Linux - Desktop 1 11-17-2010 08:17 AM
[SOLVED] rotating dsktop? wufo Slackware 3 02-16-2010 08:25 PM
Rotating X with xrandr antifelix Linux - Newbie 3 08-22-2003 10:56 PM
messages not rotating TruckStuff Linux - General 1 02-03-2003 11:46 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:38 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration