Simple Two-Factor SSH Authentication
moocode.com
Simple Two-Factor SSH Authentication
1–10 of 47 posts
Re: Simple Two-Factor SSH Authentication
#2If you're running a recent version of OpenSSH, you can add the 'ForceCommand' param to sshd_config to add it for all users. The only downside to this is it is for all users, so if you run something that needs to use key based login without the two factor method you'll need to validate that yourself within the script.
Re: Simple Two-Factor SSH Authentication
#3If you're running a recent version of OpenSSH, you can add the 'ForceCommand' param to sshd_config to add it for all users. The only downside to this is it is for all users , so if you run something that needs to use key based login without the two factor method you'll need to validate that yourself within the script.
Cool, I wasn't aware of that option. Thanks!
Re: Simple Two-Factor SSH Authentication
#4Beware that this may break apps that use SSH as a transport protocol (like rsync and mercurial, depending on your setup of course).
Re: Simple Two-Factor SSH Authentication
#5Beware that this may break apps that use SSH as a transport protocol (like rsync and mercurial, depending on your setup of course).
The extended example 'should' work with those kinds of apps. The trivial example does not.
Re: Simple Two-Factor SSH Authentication
#6If you're running a recent version of OpenSSH, you can add the 'ForceCommand' param to sshd_config to add it for all users. The only downside to this is it is for all users , so if you run something that needs to use key based login without the two factor method you'll need to validate that yourself within the script.
it seems to me that you're doing 2 factor on the ssh key decryption. That's not so useful IMO from the security point of view.
The factor should be an alternative to the ssh key itself aka server side aka via ForceCommand as suggested
Re: Simple Two-Factor SSH Authentication
#7I got a certificate warning when opening the page.
Re: Simple Two-Factor SSH Authentication
#8I got a certificate warning when opening the page.
Interesting, would you mind letting me know which browser/version you're running? and the error message if possible?
Re: Simple Two-Factor SSH Authentication
#9If you're running a recent version of OpenSSH, you can add the 'ForceCommand' param to sshd_config to add it for all users. The only downside to this is it is for all users , so if you run something that needs to use key based login without the two factor method you'll need to validate that yourself within the script.
> The only downside to this is it is for all users
Look up the Match command, you can limit ForceCommand and many others to a specific "User, Group, Host and Address."
Re: Simple Two-Factor SSH Authentication
#10Could a user bypass this by using: ssh user@host.com -Tv 'bash' ?