PAM_BARADA(8)

💖 PAM_BARADA 💖

okay so bestie, we're doing a manual page and honestly? this one's a banger. it's pam_barada, it lives in the User Manuals section (that's section 8, system admin girlies, iykyk), and it's here to hand you two-factor auth like it's nothing. 🎀

---

✨ NAME ✨

pam_barada — a PAM module that lets you do HOTP authentication. that's it, that's the whole vibe. 🦋

---

🌸 SYNOPSIS 🌸

pam_barada.so

---

💅 DESCRIPTION 💅

so like, this PAM module is literally designed to give you two-factor authentication support, built on an algorithm that's laid out in RFC 4226 and goes by the name HOTP. periodt. 🔥

and that's why this exists, fr fr. it's an implementation of the HOTP protocol, but as a PAM module, which is giving very much "extra security, main character energy". basically — on top of your normal password, users also get assigned a 128 bit key and a PIN number that can be any length it wants (arbitrary-length, we don't gatekeep). every single time you wanna log in with an OTP, you calculate a secure hash based on the PIN you were assigned plus an increasing counter, and the result of all that math is a six character one time password. iconic behaviour honestly. ✨

now, this module could totally be used alongside lots of different client devices — it's not picky — but it was written specifically with Android devices in mind. 👑 there's companion software that runs on Android, so your phone basically becomes a SecureID token. all you gotta do is:

1. open up the software 🫶
2. type in your PIN
3. get back a 6-character number you can use to log into your system

and that's the whole flow. chef's kiss. 💖

---

🧚 MODULE TYPES PROVIDED 🧚

only the auth type is provided. one job, and she does it flawlessly. 💅

---

🌈 EXAMPLES 🌈

drop this line into /etc/pam.d/login to get HOTP style login:

auth    sufficient  pam_barada.so

slay. that's it. go log in. 🎀

---

🔥 SEE ALSO 🔥

• barada-add(8)
• pam.conf(5)
• RFC 4226 - HOTP: An HMAC-Based One-Time Password Algorithm
  • http://www.rfc-editor.org/rfc/rfc4226.txt

---

bestie reminder: keep those commands and paths exactly as written, no cap. the module is not gonna vibe with typos. 😭

okay bye ily, this page came from Linux, dated 2012-06-02, and it's filed under PAM_BARADA(8). mwah 💜🌸