<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css">body {word-wrap: break-word; background-color:#ffffff;}</style>
</head>
<body>
<div style="font-family: sans-serif; font-size: 16px">Hi,<br>
You can use google two factor authentication where each user provides the token for another paired user. Both of them hold they own passwords and the token is appended to it.<br>
<br>
<br>
Vladimir<br>
<br>
<font color="#333333"><i><span style="font-size: 14px"><font face="sans-serif">Connected by MOTOBLUR™</font></span></i></font></div>
<br>
<br>
-----Original message-----<br>
<blockquote style="; border-left: 2px solid rgb(16, 16, 255); margin-left: 5px; padding-left: 5px;">
<div style="font-family: sans-serif; font-size: 14px"><b>From: </b>"PEOPLES, MICHAEL P" <mp4783@att.com><b><br>
To: </b>"freeradius-devel@lists.freeradius.org" <freeradius-devel@lists.freeradius.org><b><br>
Sent: </b>Wed, Oct 16, 2013 18:21:06 GMT+00:00<b><br>
Subject: </b>Creating a two man login module<br>
<br>
</div>
<div><style>
<!--
.EmailQuote
{margin-left:1pt;
padding-left:4pt;
border-left:#800000 2px solid}
-->
</style>
<div><font face="Courier New" size="3"><span style="font-size:12pt">
<div><font color="#0000CC">I am very new to RADIUS and C, so feel free to point and laugh.</font></div>
<div><font color="#0000CC"> </font></div>
<div><font color="#0000CC">On Red Hat Enterprise Linux 5, I wish to create a login module that would require the “consent” of two users before either could login.</font></div>
<div><font color="#0000CC"> </font></div>
<div><font color="#0000CC">I have already modified the pam_radius module to perform a few of the things I need and I know where to “intercept” the authentication process to control whether it is successful or not. When authenticating for sudo, the modified
code seems to perform most of what I want. However, my problem is with initial system login.</font></div>
<div><font face="Calibri" size="2" color="#0000CC"><span style="font-size:11pt"> </span></font></div>
<div><font color="#0000CC">What I cannot figure out is how to provide a prompt during the initial system login so that the two users can “interact”. I need to be able to do the following:</font></div>
<div><font color="#0000CC"> </font></div>
<ol style="margin:0; padding-left:36pt">
<font color="#0000CC">
<li style="margin-bottom:6pt">Provide a standard login prompt and accept the users PIN + Token</li><li style="margin-bottom:6pt">Generate and display a random number</li><li style="margin-bottom:6pt">Provide a prompt where that random number can be typed in</font>
</li></ol>
<div><font color="#0000CC">My experience with the pam_radius module gives me confidence that I can code the underlying “logic” of the process. What I can’t figure out is where do I code the prompts? There are suggestions that it is in one of the “getty” type
processes, but I cannot figure it.</font></div>
<div><font color="#0000CC"> </font></div>
<div><font color="#0000CC">Any help would be very much appreciated, including the suggestion that what I’m trying to do is either ill-advised (I’m not sure why that would be) or extremely difficult (i.e. requires modifying the core kernel).</font></div>
<div><font color="#0000CC"> </font></div>
<div><font color="#0000CC">Thank you.</font></div>
<div><font face="Calibri" size="2" color="#0000CC"><span style="font-size:11pt"> </span></font></div>
<div><font face="Calibri" size="2" color="#0000CC"><span style="font-size:11pt"> </span></font></div>
<div><font color="blue">Michael Peoples (mp4783)</font></div>
<div><font color="blue">iGEMS COE, Deployment, Engineering, Application Support and Security</font></div>
<div><font color="blue">Global Service Assurance, M5</font></div>
<div><font color="blue">AT&T Business Solutions</font></div>
<div><font color="blue">Office: +1 614-886-0923</font></div>
<div><font color="blue">Mobile: +1 614-886-0923</font></div>
<div><font color="blue"> </font></div>
<div><font color="blue">Senior Systems Manager</font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt"><a href="mailto:mpeoples@att.com"><font face="Courier New" size="3" color="blue"><span style="font-size:12pt"><u>mpeoples@att.com</u></span></font></a></span></font></div>
<div><font face="Calibri" size="2" color="#0000CC"><span style="font-size:11pt"> </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt"><i>This e-mail and any files transmitted with it are AT&T property, are confidential, and are intended solely for the use of the individual or entity to whom this email is addressed. If you are not
one of the named recipient(s) or otherwise have reason to believe that you have received this message in error, please notify the sender and delete this message immediately from your computer. Any other use, retention, dissemination, forwarding, printing,
or copying of this e-mail is strictly prohibited."</i></span></font></div>
<div><font face="Calibri" size="2" color="#0000CC"><span style="font-size:11pt"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt"> </span></font></div>
</span></font></div>
</div>
</blockquote>
</body>
</html>