The tag has no usage guidance.

learn more… | top users | synonyms

5
votes
0answers
75 views

Ansible - Access through Bastion w/ MFA

In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled. I've managed to get Ansible to successfully talk to servers through the bastion, ...
13
votes
2answers
245 views

SSH Two-Factor auth (2FA) with a yubikey

So I've got this slick little yubikey and I want to add an additional layer of security when authenticating ssh sessions. On the server side I've already disabled password authentication and only ...
0
votes
1answer
222 views

How to Configure Roundcube/Dovecot for *Effective* 2-Factor Authentication

There are several Roundcube plugins that provide two-factor authentication. However, the issue I now see is that I can still simply log in via IMAP/SMTP, without 2-FA (obviously). 2-FA is (effectively)...
1
vote
0answers
96 views

PAM Google Authenticator With SFTP And Other Apps

I'm attempting to set up a situation where SSH Authorized Key + Google Authenticator Code is sufficient to ssh into the server. This is working fine for normal SSH terminal operations - I'm prompted ...
1
vote
2answers
81 views

Two factor SSH authentication on multiple servers

I am a newbie when it comes to Two factor authentication. I have the general idea of implementing two factor authentication on a single server. But I was wondering if there is a standard solution for ...
0
votes
1answer
819 views

What's the easiest way to integrate Authy (two-factor) authentication with Apache httpd?

EDIT: Something similar to Authy would work too, if that service was i) hosted/SaaS and ii) able to send SMS messages. Most examples advocate RADIUS for two-factor authentication but I'm already ...
1
vote
0answers
197 views

OSX two-factor Authentication for ARD and VNC

I am looking at the possibility to add two-factor authentication , using linOTP and Radius, to all network logins ( Servers, Workstations, Switches, etc... ) So far I have been able to set this up for ...
2
votes
4answers
2k views

PAM, RADIUS, Google Authenticator and Two Factor Auth

I have setup FreeRADIUS, PAM and the Google Authtenicator. FreeRADIUS calls PAM, which in turn calls the Google pam_google_authenticator.so libary. That all works successfully. However, that's not ...
0
votes
1answer
2k views

Two-Factor Authentication for Zimbra

I have been looking for a Two-Factor Authentication that works well with Zimbra open source edition. One of the products I looked at - eToken PASS(http://www.safenet-inc.com/multi-factor-...
11
votes
3answers
7k views

Trying to get SSH with public key (no password) + google authenticator working on Ubuntu 14.04.1

I'm using Ubuntu 14.04.1 (with OpenSSH 6.6 and libpam-google-authenticator 20130529-2). I'm trying to set up SSH logins where the public key authenticates (without a password) and a user is prompted ...
0
votes
1answer
158 views

ssh tunnel through two-factor auth

I need to connect to server using SSH, and the server has two-factor authentication enabled and secretkey disabled. Now, I can connect "manually" form the shell with the help of Google authenticator ...
1
vote
1answer
1k views

Boot Windows Azure into Safe Mode

If I only have access to the Azure web interface (eg: no RDP access) is there any way I can boot a windows Azure VM into safe mode AND remotely access it?
2
votes
2answers
1k views

freeradius two factor without factor concatenation

I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN. All ...
1
vote
0answers
390 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
6
votes
1answer
1k views

Combination of SSH key auth, and two-factor authentication

I was wondering if it is possible to accomplish the following, all at the same time: Disable root logins Enable SSH login for personal user, only via SSH keys Enable SSH login for unprivileged user, ...
1
vote
1answer
49 views

SSH listen on 2 ports, With a single config

Im trying to make SSH logins require 2 factor auth but only on one port. So port 1 is open only to a list of ip's managed by iptables. and only requires password / key port 2 is open to all, But ...
5
votes
1answer
2k views

Two Factor SSH Authentication on external address only

I have an Ubuntu server with both a private, internal, IP and a public-facing IP. I want to set up two-factor authentication for SSH on just the public side. Is this possible? I was planning on using ...
3
votes
1answer
682 views

Implementing a form of port knocking + Phone Factor = 2 Factor auth for RDP?

I have been looking into how to secure a publicly-available RDP endpoint and want to implement our two-factor authentication RADIUS server, PhoneFactor. I would like to implement the following process:...
30
votes
7answers
6k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
6
votes
2answers
3k views

Keeping Private SSH Keys Safe

I have a central server where I stored all the private ssh keys to the different machines that I want to ssh to. Currently, only sysadmins have access to this 'central' server. Given the above ...
5
votes
5answers
4k views

looking for opensource 2 factor authentication server [closed]

i'm looking for opensource 2 factor authentication service. (Right now we're using openLDAP.) We're just using Linux Servers. That's why the service should work well with PAM Linux. It would also be ...
3
votes
1answer
82 views

Is RSA's SecureID anyless secure in light of the attacks exploiting them?

Additionally, is two-factor authentication in general less secure, and if so, why?
2
votes
1answer
334 views

PAM example of performing authentication using a custom external script?

I've heard that you can use pam_exec to call an external script, and have that external script perform the actual authentication. Can anyone provide an example of doing this?
5
votes
5answers
3k views

Two Factor Authentication on EC2

I need to host stuff for a financial institution on EC2. The bank wants complete Two Factor Authentication so Stuff like having SSH with a key with password. Something like SecureID or similar would ...