%%% portions-copyright-cmetz-96
Portions of this software are Copyright 1996-1999 by Craig Metz, All Rights
Reserved. The Inner Net License Version 2 applies to these portions of
the software.
You should have received a copy of the license with this software. If
you didn't get a copy, you may request one from <license@inner.net>.
Portions of this software are Copyright 1995 by Randall Atkinson and Dan
McDonald, All Rights Reserved. All Rights under this copyright are assigned
to the U.S. Naval Research Laboratory (NRL). The NRL Copyright Notice and
License Agreement applies to this software.
History:
Modified by cmetz for OPIE 2.4. Fixed spelling bug.
Modified by cmetz for OPIE 2.3. Added -f flag documentation.
Updated console example.
Modified by cmetz for OPIE 2.2. Removed MJR DES documentation.
Modified at NRL for OPIE 2.0.
Written at Bellcore for the S/Key Version 1 software distribution
(keyinit.1).
$FreeBSD: releng/10.2/contrib/opie/opiepasswd.1 92914 2002-03-21 23:42:52Z markm $
.lt 6.0i
-v Display the version number and compile-time options, then exit.
-h Display a brief help message and exit.
-c Set console mode where the user is expected to have secure access to the system. In console mode, you will be asked to input your password directly instead of having to use an OPIE calculator. If you do not have secure access to the system (i.e., you are not on the system's console), you are volunteering your password to attackers by using this mode.
-d Disable OTP logins to the specified account.
-f Force opiepasswd to continue, even where it normally shouldn't. This is currently used to force opiepasswd to operate in "console" mode even from terminals it believes to be insecure. It can also allow users to disclose their secret pass phrases to attackers. Use of the -f flag may be disabled by compile-time option in your particular build of OPIE.
-n Manually specify the initial sequence number. The default is 499.
-s Specify a non-random seed. The default is to generate a "random" seed using the first two characters of the host name and five pseudo-random digits.
wintermute$ opiepasswd -c Updating kebe: Reminder - Only use this method from the console; NEVER from remote. If you are using telnet, xterm, or a dial-in, type ^C now or exit with no password. Then run opiepasswd without the -c parameter. Using MD5 to compute responses. Enter old secret pass phrase: Enter new secret pass phrase: Again new secret pass phrase: ID kebe OPIE key is 499 be93564 CITE JAN GORY BELA GET ABED wintermute$
Using opiepasswd from remote:
wintermute$ opiepasswd Updating kebe: Reminder: You need the response from your OPIE calculator. Old secret password: otp-md5 482 wi93563 Response: FIRM BERN THEE DUCK MANN AWAY New secret password: otp-md5 499 wi93564 Response: SKY FAN BUG HUFF GUS BEAT ID kebe OPIE key is 499 wi93564 SKY FAN BUG HUFF GUS BEAT wintermute$
/etc/opiekeys -- database of key information for the OPIE system.