Original issue 119 created by tore.lonoy on 2011-11-11T08:27:32.000Z:

Currently google-authenticator cannot be used to authenticate with a single password that consists of the one time key and a personal password.

What I would like to do is this:

1. Assume username "root"
2. Assume "root"s username is "test1234" (in /etc/passwd)
3. Assume next one time key is "abcdabcd", and is always 8 in lenght
4. SSH to server
5. Provide username "root"
6. Provide password "test1234abcdefg"

When 6. is checked with PAM, the google-authenticator will get the last 8 chars if the password provided, and validate it. If auth OK, the module will return OK and "test1234", and hand it over to the next PAM, pam_unix.so.

Yubico (http://yubico.com/) has done this with their yubikey.

The source code to their PAM module is located here: http://code.google.com/p/yubico-pam/

This would enable users to use google-authenticator with e.g. pfsense and PPTP, and just about any other PAM enabled application.