Re: openssh two factor authentication

Hi
Thorir Magnusson wrote:

Hi

I have one server (ubuntu server 7.04, openssh) and I would like to be
asked about password and then an extra question. The extra question should
be somthing the user knows and changes with time (example today is
31-10-2007 so the user would type in 61 (2*day-1 2*31-1 = 61)
Well I suggest you want to make the ssh-server more secure. The normal way
to do this is to use dsa-keys and use passwords for the keys. In this case
I don't know how to crack the system.

To implement your way, you could set in /etc/paswd the shell to a program
that ask the second question and open a shell if the answer is right. But
be careful because this allows Portforwarding and I guess the call of
other commands :-( in the worstcase /bin/bash :-(((

Niels
.