OpenBSD & OTP
i don’t like ssh & password authentication. but sometime, specially during setup or recovery, it’s need and make sense. thought i’ll protect some boxes with otp. here a few notes and instrucations
Build login_otp
git clone https://github.com/reyk/login_otp
cd login_otp
make obj
make all
doas make install
Initialize OTP DB
doas otp -i
Generate Key for User
otp -g
Name: stoege
Key: xxxx xxxx xxxx xxxx xxxx xxxx xx
URL: otpauth://totp/stoege?secret=xxxxxxxxxxxxxxxxxxxxxxxxxx&issuer=&algorithm=SHA1&digits=6&period=30
Build QR Code
echo "otpauth://totp/stoege?secret=xxxxxxxxxxxxxxxxxxxxxxxxxx&issuer=&algorithm=SHA1&digits=6&period=30" |qrencode -t ansiutf8
and scan the code with the google authenticator (or similar app)