It's not possible to allow non-OPIE logins only from trusted networks

Alexander Leidinger Alexander at Leidinger.net
Wed Mar 16 07:43:27 UTC 2011


Quoting Dag-Erling Smørgrav <des at des.no> (from Wed, 16 Mar 2011  
07:52:11 +0100):

> Miguel Lopes Santos Ramos <mbox at miguel.ramos.name> writes:
>> They also make the questionable argument of a paper being more
>> portable than a calculator, which I also understand but don't agree,
>> because a calculator can be "transported" over the Internet easily.
>
> Perhaps, perhaps not.  It depends on how much you trust the browser.
> However, pretty much everyone these days carries a mobile phone capable
> of running a key calculator.

Maybe a little bit unrelated, but: for which kinds of logins do you  
use OPIE? SSH or generic OS logins are obvious places to use it, but I  
am more interested in other uses. I already use it in wordpress, but I  
still search a way to use it for IMAP (there seems to be a protocol  
enhancement for it, but I didn't find an implementation so far),  
gallery2 and ejabberd (if xmpp allows something like this) without the  
need to let them use system users (e.g. the IMAP user/pw are currently  
in MySQL, the xmpp users are in the ejabberd internal DB, ...).

Anyone with ideas regarding this?

It would also be nice to hear other possibilities where OPIE can be  
used (snmp auth?).

Bye,
Alexander,

-- 
Yesterday I was a dog.  Today I'm a dog.
Tomorrow I'll probably still be a dog.
Sigh!  There's so little hope for advancement.
		-- Snoopy

http://www.Leidinger.net    Alexander @ Leidinger.net: PGP ID = B0063FE7
http://www.FreeBSD.org       netchild @ FreeBSD.org  : PGP ID = 72077137


More information about the freebsd-security mailing list