What steps will reproduce the problem?
1. Keylog a user logging in
2. Automatically retry with this logged password
3. Eventually the passwords will rotate all the way around back to the start
and the logged password will be accepted
What is the expected output? What do you see instead?
Once one time passwords have been exhausted, or getting close to all being
used, the user should be prompted to generate a new list when they next have
access to a secure terminal.
What version of the product are you using? On what operating system?
Ubuntu Ibex, libpam-opie/lucid-security uptodate 0.21-8build3.1
Please provide any additional information below.
Original issue reported on code.google.com by jag...@gmail.com on 10 Jul 2011 at 12:59
Original issue reported on code.google.com by
jag...@gmail.com
on 10 Jul 2011 at 12:59