On Tue, Sep 02, 2025 at 07:39:42PM -0000, Stuart Henderson wrote:
> On 2025-09-02, Robert Alessi <[email protected]> wrote:
> >> this is a shortcoming of login_yubikey(8) - other yk otp-based login
> >> methods (e.g. using radius to auth at a central location that checks
> >> coubters) are possible.
> >
> > I surmise the same shortcoming also applies to S/Key?
> 
> I would expect separate OTP lists per machine for S/Key, otherwise think
> I would the user will get rather confused as to which OTP to use.
> 
> Less likely to be the case for yubikey OTPs where you just need any
> valid OTP with a higher sequence than that ussd by the last successful
> login.
>

Right.  Thanks again.

Reply via email to