diff --git a/README b/README index 7ee2982..67330f5 100644 --- a/README +++ b/README @@ -119,11 +119,15 @@ Supported PAM module parameters are: http://api.yubico.com/wsapi/verify?id=%d&otp=%s "verbose_otp": - This argument is used to show the OTP when it is entered. + This argument is used to show the OTP when it is entered, + i.e. to enable terminal echo of entered characters. You are advised to not use this, if you are using two factor - authentication. Also, it requires the service using the pam - module to display custom fields. (e.g. OpenSSH requires you - to configure "ChallengeResponseAuthentication no") + authentication because that will display your password on the + screen. + + This requires the service using the PAM module to + display custom fields. For example, OpenSSH requires + you to configure "ChallengeResponseAuthentication no". "ldap_uri": specify the LDAP server URI (e.g. ldap://localhost).