oath-toolkit-help
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[OATH-Toolkit-help] Aladdin eToken OTP secret length


From: Mitya
Subject: [OATH-Toolkit-help] Aladdin eToken OTP secret length
Date: Sun, 01 May 2011 00:36:11 +0400

Hi,

Aladdin eToken OTP uses HOTP with 192-bit (24-byte) seed.
Attempts to use such a seed in /etc/users.oath make PAM authentication
fail, since secret length is hard-coded to 20 bytes
(liboath/usersfile.c:67) and pam_sm_authenticate() returns
OATH_TOO_SMALL_BUFFER.

Please consider increasing secret length to 24 bytes. Thank you!

Mitya




reply via email to

[Prev in Thread] Current Thread [Next in Thread]