The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
37 views

Server allows logging in without supplying a password and no ssh keys were exchanged, what could be the reason?

I'm trying to secure an outbound server with Google 2FA solution. For the time being, I'm first configuring everything on a local Vagrant machine and once everything works as intended I'll run it as ...
1
vote
1answer
24 views

How to configure pam sshd to allow different rules on different users/groups?

I'm configuring google two-factor authentication on an outbound server in the company I work for. Here are the relevant configurations: /etc/ssh/sshd_config: ubuntu@stage-itai-1:~$ egrep -v '^#' /...
0
votes
1answer
30 views

Google-2fa: How to recover an account when emergency codes are not available? [closed]

There's a server in my company which is configured with Google two-factor authentication. A user from the company has lost his phone and can't find his emergency codes. What can be done in order to ...
1
vote
1answer
38 views

What is the right way to back up google authenticator emergency keys?

I'm implementing Google 2-Factor Authentication on some servers in my company. When configuring Google 2FA on client computers, 5 emergency codes are generated to be used if a user forgets his master ...
0
votes
0answers
212 views

cannot connect openvpn ubuntu 16.04

I have openvpn with google authenticator. It connects via browser but when I try to connect it via terminal following error is thrown after I enter google authenticator code. I am able to connect ...
1
vote
0answers
98 views

MS Active Directory with Google Authenticator

I am currently designing our new internal IT services, including IAM and e-mail. We currently use more or less no IAM or single sign-on solution. We have a WordPress based website, postfix + dovecot ...
3
votes
0answers
32 views

industry standards for using google-authenticator with linux users?

Would like to ask, particularly those who run large environments with lots of users, if there are any standardized- or industry-recommended ways to securely distribute the verification codes to remote ...
0
votes
0answers
63 views

Enable Google Authenticator to send codes via SMS with OpenVPN

Setup: Using OpenVPN in single-server<->multi-client configuration. Running google authenticator PAM module in order to enforce 2 factor authentication. Problem: Some employees don't have a ...
0
votes
1answer
26 views

How to enable Google Authenticator over sshd when already using public key?

I'm running Debian Jessie on a VPS. I want to enable both private key and Google Authenticator to get into the server via SSH. I enabled auth required pam_google_authenticator.so ...
0
votes
0answers
92 views

How to set up libreswan with PAM and Google-authenticator for Mac Clients

I can't seem to get xauthby=pam working. I recompiled libreswan with PAM support. The VPN server does work when I set it up to use chap so I know the server is largely set up right. I'm following ...
5
votes
0answers
145 views

How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?

I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a ...
1
vote
1answer
377 views

SSH Authentication using RADIUS + Google Authenticator

I'm trying configure my SSHD's to authenticate users using FreeRadius. The FreeRadius server needs to first require a valid OTP using Google Authenticator, and then verify the system account password. ...
1
vote
0answers
96 views

PAM Google Authenticator With SFTP And Other Apps

I'm attempting to set up a situation where SSH Authorized Key + Google Authenticator Code is sufficient to ssh into the server. This is working fine for normal SSH terminal operations - I'm prompted ...
0
votes
1answer
726 views

google-authenticator for two-factor-authentication support with openvpn client on linux

I am trying to get openvpn client to work with google-authenticator and two-factor-authentication. I cannot alter the server in any way (i.e. I cannot do password/token concactenation via pam mods, ...
0
votes
0answers
42 views

Public key authentication plus challenge authentication

I am trying to setup 2-phase authentication based on this guide, but instead of entering the password I would like public key to be involved. If PubkeyAuthentication yes in /etc/ssh/sshd_conf then 2 ...
1
vote
1answer
659 views

Google Authenticator - generate new set of emergency codes

I use Google Authenticator on my SSH servers with Andoid app for generating codes. After I run $ google-authenticator application create set of emergyncy keys: https://www.google.com/chart?chs=...
11
votes
3answers
7k views

Trying to get SSH with public key (no password) + google authenticator working on Ubuntu 14.04.1

I'm using Ubuntu 14.04.1 (with OpenSSH 6.6 and libpam-google-authenticator 20130529-2). I'm trying to set up SSH logins where the public key authenticates (without a password) and a user is prompted ...
1
vote
0answers
215 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
1
vote
1answer
48 views

skip 2 steps verification when there is ssh key Debian [closed]

I had installed 2 steps verification on my server using this great manual: http://support.jpgottech.com/knowledgebase.php?article=72 Everything works great but I had encountered a small issue, I want ...
3
votes
2answers
2k views

Public-Key -or- Password & Google Authenticator for SSH Login

I found an article (http://www.howtogeek.com/121650/how-to-secure-ssh-with-google-authenticators-two-factor-authentication/) that explains how to configure OpenSSH to ask for a Google Authenticator ...
0
votes
2answers
2k views

How do I create a custom ADFS 2nd factor sign in page?

I have a C# dll that provides HOTP and TOTP authentication. I'd like to adapt this for use with ADFS sign in pages. (I'll share this DLL with you if you like) How do I integrate my authentication ...
2
votes
1answer
582 views

Git github not working with google authenticator OSX

So I had git running on my computer just fine. My password was saved with the osxkeychain thingy and everything ran smoothly. Today I decided I should be safe and enable google authenticator 2-step ...
6
votes
1answer
980 views

Need help understanding PAM directives

I have the following directives in my /etc/pam.d/sshd file on a RHEL5 box and I'm a bit confused. These directives are there to make LDAP+RADIUS+OTP work. What I'm trying to do is tell pam not to ...
1
vote
1answer
1k views

possible? radius server with active directory users and google authentication

We currently have an old RSA token - Radius environment we want to replace Would this architecture be possible? (this works, there are examples on the internet) Linux server Google Authentication ...
0
votes
2answers
1k views

Whitelist IP from google-authenticator in sshd pam

My Ubuntu 12.04 server uses the google-authenticator pam module to provide two step authentication for ssh. I need to make it so that a certain IP does not need to type the verification code. The /...
4
votes
2answers
2k views

Google authenticator with Openldap or Fedora 389 Server or FreeIPA

After a little googling I could see some references of configuring Google Authenticator with Windows Active Directory, however, I could not see how I could do it on Linux/CentOS system. What would be ...
1
vote
3answers
717 views

Using Google Authenticator with an IMAP server

Google released it's Google Authenticator Module with a PAM interface. Have someone experience on implementing this into an imap server?
6
votes
1answer
1k views

ssh with passphrase, fallback to Google Authenticator

With the introduction of Google Authenticator and the ability to use it with ssh I was wondering if someone has gone through a sshd_config setup which would first expect a key if this fails, fall ...
2
votes
2answers
1k views

Google Authenticator PAM for specific users

My current sshd PAM config: #%PAM-1.0 auth include system-auth account required pam_nologin.so account include system-auth password include system-auth session ...