Thanks for this report; I did not find any advice on any Ubuntu wiki pages that say to add the line at the bottom of the PAM configuration files. The package documentation is also similarly silent on where to put the configuration line.
Modifying user PAM configurations is extremely dangerous; I don't think we will publish any updates that modifies existing configurations. Since there are no Ubuntu changes in the google-authenticator package, the best way to get the package documentation updated would be to file a bug report with Debian, and include a debdiff that they can apply to the package. Thanks -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1491597 Title: brute force attack on password possible on many existing google- authenticator setups To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/google-authenticator/+bug/1491597/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
