About Dual Authentication

[Muhammad Shamroze]

Sir, I'm Using HP-UX Release B.11.00 and i want to do dual Authentication on my Super user (root) Account,When system Start and login screen appear and if i want to login from root it ask me for dual authentication for example:

Console Login: root
root1 password :
root2 password :

and if it is authenicated then # prompt arrived.

so can u please help me out so ill be thankful to you

** edited to comply with forum guidelines **

[Duncan Edmonstone]

I'm not aware of any way of doing this through OS tools - I once worked at a financial institution which practiced this though - in our case we had some commercial sudo like tools that we used for 'normal' admin, and when we needed the actual root password, 2 managers would retrieve half the password each from 2 different safes - then 1 woould enter his half, and the other his half...

It worked after a fashion, but I'm not convinced how much extra security this provided - my thoughts were it was more to make the managers feel like ICBM missile commanders!

HTH

Duncan

[Rainer von Bongartz]

You should be able to accomplish this using the
PAM modules.

But you need two different instances for the authorization, for example passwd and an LDAP or Kerberos server.

See: man pam.conf

Regards
Rainer