Add two-factor authentication to your ssh in 30 seconds
blog.authy.com
Add two-factor authentication to your ssh in 30 seconds
1–10 of 108 posts
Re: Add two-factor authentication to your ssh in 30 seconds
#2yes exactly what I've been looking for, awesome tool! Thanks for sharing.
Re: Add two-factor authentication to your ssh in 30 seconds
#3Great idea
Re: Add two-factor authentication to your ssh in 30 seconds
#4Pretty cool. Google authenticator is another alternative that be used via a pam module, with the additional benefit that it doesn't need to connect to something else for verification.
Re: Add two-factor authentication to your ssh in 30 seconds
#5Pretty cool. Google authenticator is another alternative that be used via a pam module, with the additional benefit that it doesn't need to connect to something else for verification. https://code.google.com/p/google-authenticator/
the problem is that google authenticator stores the seed in the phone(and the server) so if you lose it basically you lose the server too, right?
Re: Add two-factor authentication to your ssh in 30 seconds
#6Pretty cool. Google authenticator is another alternative that be used via a pam module, with the additional benefit that it doesn't need to connect to something else for verification. https://code.google.com/p/google-authenticator/
the problem is that google authenticator stores the seed in the phone(and the server) so if you lose it basically you lose the server too, right?
I think it still requires your normal password as well, so the server wouldn't be lost unless someone had both.
Re: Add two-factor authentication to your ssh in 30 seconds
#7Been using this for around a month and it's great. Highly recommended.
Re: Add two-factor authentication to your ssh in 30 seconds
#8Pretty cool. Google authenticator is another alternative that be used via a pam module, with the additional benefit that it doesn't need to connect to something else for verification. https://code.google.com/p/google-authenticator/
Seconding the recommendation for PAM/Google Authenticator.
Off-topic: Has anyone ever managed to get PAM/Google Authenticator working with RADIUS? I spent a while messing about with this last year, and never got it working exactly as I had hoped. I'm no longer working with RADIUS, but this post reminded me I never finished scratching that geeky itch.
Re: Add two-factor authentication to your ssh in 30 seconds
#9Pretty cool. Google authenticator is another alternative that be used via a pam module, with the additional benefit that it doesn't need to connect to something else for verification. https://code.google.com/p/google-authenticator/
the problem is that google authenticator stores the seed in the phone(and the server) so if you lose it basically you lose the server too, right?
It's two-factor authentication: something you have (phone) and something you know (password to your ssh cert). So, you have to lose both in order to lose the server.
Re: Add two-factor authentication to your ssh in 30 seconds
#10Pretty cool. Google authenticator is another alternative that be used via a pam module, with the additional benefit that it doesn't need to connect to something else for verification. https://code.google.com/p/google-authenticator/
Seconding the recommendation for PAM/Google Authenticator. Off-topic: Has anyone ever managed to get PAM/Google Authenticator working with RADIUS? I spent a while messing about with this last year, and never got it working exactly as I had hoped. I'm no longer working with RADIUS, but this post reminded me I never finished scratching that geeky itch.
I wrote a Sinatra app to act as a Google Authenticator backend for our FreeRADIUS instance as well as our web SSO. It also handles enrollment via generating QR codes:
http://it.isevil.org/blog/2011/11/13/authentication-service-...
Code: https://github.com/bithive/example-totp-vault
For FreeRADIUS we use rlm_perl to define our own authenticate() method; it just calls the web service to validate the codes.