[rancid] OTP/2-factor authentication

[heasley]

Tue, Feb 20, 2018 at 09:34:32PM +0000, Wayne Eisenberg:
> I did some searching, and I'm pretty sure I already know the answer, but has anyone had any success with rancid and 2-factor authentication such as OKTA (time-based OTP)?
> 
> Any workarounds?

how would it work?  I'm probably being dense on the subject, but it seems
like an obstacle to automation.  Happy to receive a cluebyfour.

it seems that such security goals can be achieved by aaa authorization
(ie: read-only) and password expiration in aaa authentication.