Hi,
I'm wondering if anything changed in terms of authentication since 2004. http://www.scalix.com/forums/viewtopic.php?t=3463
I'm currently looking for one-time password solution for Scalix webmail, so far OTP sent over SMS is a preferred solution since there are some PAM modules available that can do sms-otp and otp webmail is planned to be a breakglass solution the the thing everybody going to use on a daily basis.
As I understand there are at least two problems:
- Scalix does not support challenge-response authentication PAM scheme
- Scalix webmail uses multiple connections to server and each connection is authenticated separately
Any light in my tunnel?