Topic: one time password with apache

[ali_fareed]

I was just wondering is there a one time password module for apache?

[James Blond]

What do you mean? Only one time login, and login will stay. Or a temporaily login?

For the only one time login in see http://httpd.apache.org/docs/2.2/mod/mod_authn_file.html

For a temporaily login I would choose a scripting solution.

[maniac]

think of php sessions and mod_unique_id

[ali_fareed]

No I mean something like the ones described here
http://en.wikipedia.org/wiki/One-time_passwordI found mod_securid which is a time-synchronized OTP which uses a hardware token that displays a changing number which you enter along with your password the hardware tokens are made by rsa security http://www.rsasecurity.com/.

[Jorge]

let me get this out here (ok I'm a bit sleep deprived so excuse me if i make no sense or totally miss the ball here)

You want the user to enter a username + password
that is static but an aditional random generated rumber?

if that is the case I think scripting is your only option.

Rought draft of what would be needed in such a case:

1) user/pass database (MySQL, encrypte file, ...)
2) a randum stuff generator... this can for example be done by:
3) generating a sha1 has of the currenttime+username+random word of a small dictionary file.

4) the login form with a display block a request to type in the user, pass, and random data

5) username, pass, random data is then saved in a php session variable.
6) check if the users data that comes with every request matches what php expects

7) for saftly let the session self destruct in 7 min after the users last request.

well this is a pseudo layout of what would be needed in such case.

I don't know if a packaged exists that provides this but I'll have a look around. Although i don't think it exists.

[ali_fareed]

yeah thats exactly what I need.

[Jorge]

Didn't find any module that could do that so a script should be the way to go.

You can do a search on Zend's devekioers pages and on hotscripts.com
I'm sure you'll find something on there.