NAME
auth/userpasswd, auth/totp – authentication agent

SYNOPSIS

auth/userpasswd [ –n ] fmt

auth/totp [ –k pattern ] | [ label ]

DESCRIPTION

Totp queries and prints the RFC 6238 TOTP code for the specified key tuple. The key tuple is selected using the provided label. This can be used to authenticate with services that require time based OTP.

Userpasswd queries and prints a cleartext user/password pair from factotum(4) for the proto=pass key tuple specified in fmt. Option –n suppresses prompting for the key if it doesn't exist. Userpasswd can be used by shell scripts to do cleartext password authentication; using plain password authentication with factotum is discouraged, as it reveals the secrets in plain text.

EXAMPLES

Adding a TOTP key to factotum:
% echo 'key proto=totp label=mylabel !secret=ABCDEF123456' \
>
/mnt/factotum/ctl

Generating a TOTP key from factotum:
% auth/totp mylabel
012345

Retrieving a password from factotum:
% auth/userpasswd 'server=setec service=ssh user=ori'
toomanysecrets

SEE ALSO
factotum(4)