[OATH-Toolkit-help] pam-oath, private usersfiles (feature request)

[Felix Salfelder]

Hi there.

it might make sense to not put user credentials into a global
configuration file. similarly, ~/.ssh/authorized_keys is per-user.

the current usersfile argument only specifies one global path. this may
be extended allowing some magic substring, like "%h" to point to the
home directory of the user that tries to authenticate.

this will lock out users that do not provide a usersfile, an additional
"optional" flag may then bypass the authorization (but there might be a
better way).

please consider the attached commit.

thanks
felix

PS: plese cc, i'm not a subscriber

0001-private-usersfile-and-optional-flag.patch
Description: Text Data