TOTP(1)                                                   TOTP(1)

     NAME
          auth/userpasswd, auth/totp - authentication agent

     SYNOPSIS
          auth/userpasswd [ -n ] fmt

          auth/totp [ -k pattern ] | [ label ]

     DESCRIPTION
          Totp queries and prints the RFC 6238 TOTP code for the
          specified key tuple.  The key tuple is selected using the
          provided label.  This can be used to authenticate with ser-
          vices that require time based OTP.

          Userpasswd queries and prints a cleartext user/password pair
          from factotum(4) for the proto=pass key tuple specified in
          fmt. Option -n suppresses prompting for the key if it
          doesn't exist.  Userpasswd can be used by shell scripts to
          do cleartext password authentication; using plain password
          authentication with factotum is discouraged, as it reveals
          the secrets in plain text.

     EXAMPLES
          Adding a TOTP key to factotum:

               % echo 'key proto=totp label=mylabel !secret=ABCDEF123456' \
                    > /mnt/factotum/ctl

          Generating a TOTP key from factotum:

               % auth/totp mylabel
               012345

          Retrieving a password from factotum:

               % auth/userpasswd 'server=setec service=ssh user=ori'
               toomanysecrets

     SEE ALSO
          factotum(4)