Does OTP work in sasl's sample-client / sample-server

Fabian Fagerholm fabbe at paniq.net
Sat May 17 07:26:28 EDT 2008


Hi!

Referring to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433305 --
has anyone used sasl's sample-client and sample-server programs to test
OTP authentication?

It seems that OTP would require user prompting to get the response to
the server challenge, but sample-client doesn't implement such
prompting, which causes all OTP authentication attempts to fail. Is this
correct?

If anyone with more insight into the code could comment, it would be
very useful. Users could be instructed not to use sample-client and
sample-server to test OTP authentication. Later, sample-client could be
extended to allow user prompting.

Cheers,
-- 
Fabian Fagerholm <fabbe at paniq.net>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.andrew.cmu.edu/mailman/private/cyrus-sasl/attachments/20080517/88e82025/attachment.bin 


More information about the Cyrus-sasl mailing list