Hi! Referring to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433305 -- has anyone used sasl's sample-client and sample-server programs to test OTP authentication? It seems that OTP would require user prompting to get the response to the server challenge, but sample-client doesn't implement such prompting, which causes all OTP authentication attempts to fail. Is this correct? If anyone with more insight into the code could comment, it would be very useful. Users could be instructed not to use sample-client and sample-server to test OTP authentication. Later, sample-client could be extended to allow user prompting. Cheers, -- Fabian Fagerholm <fabbe@xxxxxxxxx>
Attachment:
signature.asc
Description: This is a digitally signed message part