TOTP(1)TOTP(1)
NAME
auth/userpasswd, auth/totp – authentication agent
SYNOPSIS
auth/userpasswd
[
-n
]
fmt
auth/totp
[
-k
pattern
] | [
label
]
DESCRIPTION
Totp
queries and prints the
RFC 6238
TOTP code
for the specified key tuple.
The key tuple is selected using the provided label.
This can be used to authenticate with services that require time based OTP.
Userpasswd
queries and prints a cleartext user/password pair from
factotum(4)
for the
proto=pass
key tuple specified in
fmt.
Option
-n
suppresses prompting for the key if it doesn’t exist.
Userpasswd
can be used by shell scripts to do cleartext password
authentication;
using plain password authentication with factotum is discouraged,
as it reveals the secrets in plain text.
EXAMPLES
Adding a TOTP key to factotum:
% echo 'key proto=totp label=mylabel !secret=ABCDEF123456' \\
> /mnt/factotum/ctl
Generating a TOTP key from factotum:
% auth/totp mylabel
012345
Retrieving a password from factotum:
% auth/userpasswd 'server=setec service=ssh user=ori'
toomanysecrets
SEE
factotum(4)