[OpenIndiana-discuss] PAM risk based authentication?

[Stefan Müller-Wilken]

Dear all,



is there a way in OpenIndiana's PAM  implementation to route through PAM modules based on environment conditions, a.k.a risk based authentication? More concretely I'd like to introduce a 2-factor PAM auth module when coming from certain IP ranges while staying with traditional Passwords for others and allow Kerberos while SSH'ing on my private network only.



Is this possible today? Thanks for any ideas! :-)



Cheers

 Stefan



________________________________

Acando GmbH, Millerntorplatz 1, 20359 Hamburg, Germany | Gesch?ftsführer: Guido Ahle | Amtsgericht Hamburg, HRB 76048 | Ust.Ident-Nr.:DE208833022