That sounds brilliant, thanks so much! I will get testing as soon as possible and come back to you with any feedback.
Now tested on Debian Squeeze using 3 lines in users.oath for the same user, two Yubikeys (so HOTP) and a TOTP iOS software token and it works like a charm. Took me a minute to figure out the userfile syntax for the TOTP (but HOTP/T30 came up in a mailing list search on Google), and I couldn't be happier. Thanks again Simon!
Cheers, -- Tim
