google / google-authenticator-libpam

Apache License 2.0
1.76k stars 281 forks source link

make grace_period usable for local authentications #161

Open bauen1 opened 4 years ago

bauen1 commented 4 years ago

grace_period was originally intended for ssh only and therefor it only considers RHOST.

However local authentications, e.g. sudo or xfce4-screensaver would also benefit from this feature, for this not only RHOST would need to be considered, but also RUSER and TTY (or a combination of all three).

cloudcosmonaut commented 1 year ago

Ah, I was already wondering why the grace period wasn't affected on my Linux laptop. That would really be a nice improvement :D