Questions tagged [two-factor]
The two-factor tag has no usage guidance.
30
questions
30
votes
7
answers
7k
views
SSH: Two Factor Authentication
I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
- 435
29
votes
3
answers
32k
views
Trying to get SSH with public key (no password) + google authenticator working on Ubuntu 14.04.1
I'm using Ubuntu 14.04.1 (with OpenSSH 6.6 and libpam-google-authenticator 20130529-2).
I'm trying to set up SSH logins where the public key authenticates (without a password) and a user is prompted ...
- 393
15
votes
2
answers
11k
views
Two Factor SSH Authentication on external address only
I have an Ubuntu server with both a private, internal, IP and a public-facing IP. I want to set up two-factor authentication for SSH on just the public side. Is this possible? I was planning on using ...
- 253
13
votes
2
answers
2k
views
SSH Two-Factor auth (2FA) with a yubikey
I have got this slick little yubikey and I want to add an additional layer of security when authenticating ssh sessions. On the server side I've already disabled password authentication and only ...
- 768
10
votes
1
answer
2k
views
Ansible - Access through Bastion w/ MFA
In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled.
I've managed to get Ansible to successfully talk to servers through the bastion, ...
- 201
7
votes
2
answers
8k
views
Keeping Private SSH Keys Safe
I have a central server where I stored all the private ssh keys to the different machines that I want to ssh to. Currently, only sysadmins have access to this 'central' server.
Given the above ...
- 817
7
votes
5
answers
7k
views
Two Factor Authentication on EC2
I need to host stuff for a financial institution on EC2. The bank wants complete Two Factor Authentication so Stuff like having SSH with a key with password. Something like SecureID or similar would ...
- 1,155
7
votes
1
answer
4k
views
Combination of SSH key auth, and two-factor authentication
I was wondering if it is possible to accomplish the following, all at the same time:
Disable root logins
Enable SSH login for personal user, only via SSH keys
Enable SSH login for unprivileged user, ...
- 191
6
votes
2
answers
4k
views
SSH public key authentication with google authenticator still asks for password
I'm trying to enable 2FA with ssh using libpam-google-authenticator. Not all users need authenticator enabled. Everybody uses ssh public keys, and nobody has a password. I'm running Debian buster, and ...
- 211
5
votes
5
answers
13k
views
looking for opensource 2 factor authentication server [closed]
i'm looking for opensource 2 factor authentication service. (Right now we're using openLDAP.)
We're just using Linux Servers. That's why the service should work well with PAM Linux.
It would also be ...
- 1,473
4
votes
0
answers
3k
views
Setup 2FA/MFA on Jenkins
I'm trying to find how to setup 2FA/MFA on users who login to Jenkins, with Google Authenticator.
Everything I'm finding is about logins to servers/git/etc, but not for the actual USERS in Jenkins.
...
- 633
3
votes
1
answer
959
views
Implementing a form of port knocking + Phone Factor = 2 Factor auth for RDP?
I have been looking into how to secure a publicly-available RDP endpoint and want to implement our two-factor authentication RADIUS server, PhoneFactor. I would like to implement the following process:...
- 3,250
3
votes
1
answer
85
views
Is RSA's SecureID anyless secure in light of the attacks exploiting them?
Additionally, is two-factor authentication in general less secure, and if so, why?
- 833
3
votes
2
answers
3k
views
freeradius two factor without factor concatenation
I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN.
All ...
- 5,557
3
votes
4
answers
7k
views
PAM, RADIUS, Google Authenticator and Two Factor Auth
I have setup FreeRADIUS, PAM and the Google Authtenicator. FreeRADIUS calls PAM, which in turn calls the Google pam_google_authenticator.so libary. That all works successfully.
However, that's not ...
- 682
3
votes
0
answers
682
views
PAM Google Authenticator With SFTP And Other Apps
I'm attempting to set up a situation where SSH Authorized Key + Google Authenticator Code is sufficient to ssh into the server.
This is working fine for normal SSH terminal operations - I'm prompted ...
- 31
2
votes
3
answers
13k
views
Boot Windows Azure into Safe Mode
If I only have access to the Azure web interface (eg: no RDP access) is there any way I can boot a windows Azure VM into safe mode AND remotely access it?
- 161
2
votes
1
answer
495
views
PAM example of performing authentication using a custom external script?
I've heard that you can use pam_exec to call an external script, and have that external script perform the actual authentication.
Can anyone provide an example of doing this?
- 1,173
2
votes
1
answer
4k
views
How to Configure Roundcube/Dovecot for *Effective* 2-Factor Authentication
There are several Roundcube plugins that provide two-factor authentication. However, the issue I now see is that I can still simply log in via IMAP/SMTP, without 2-FA (obviously). 2-FA is (effectively)...
- 31
2
votes
0
answers
768
views
How to add two-factor authetntication to ssh?
I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server:
publickey and 2FA, or
password and 2FA
So far I managed to add 2FA to publickey authentication, ...
- 153
1
vote
1
answer
80
views
SSH listen on 2 ports, With a single config
Im trying to make SSH logins require 2 factor auth but only on one port.
So port 1 is open only to a list of ip's managed by iptables. and only requires password / key
port 2 is open to all, But ...
- 539
1
vote
1
answer
2k
views
ssh tunnel through two-factor auth
I need to connect to server using SSH, and the server has two-factor authentication enabled and secretkey disabled. Now, I can connect "manually" form the shell with the help of Google authenticator ...
- 125
1
vote
1
answer
847
views
Security of a hardware token vs software token for two-factor authentication
Surprisingly I don't see this question on ServerFault already. I'm wondering about the pros and cons of hardware token vs software token for two-factor authentication - only in the context of ...
- 979
1
vote
2
answers
685
views
Two factor SSH authentication on multiple servers
I am a newbie when it comes to Two factor authentication. I have the general idea of implementing two factor authentication on a single server. But I was wondering if there is a standard solution for ...
- 111
1
vote
0
answers
477
views
OSX two-factor Authentication for ARD and VNC
I am looking at the possibility to add two-factor authentication , using linOTP and Radius, to all network logins ( Servers, Workstations, Switches, etc... )
So far I have been able to set this up for ...
- 11
0
votes
1
answer
4k
views
Two-Factor Authentication for Zimbra
I have been looking for a Two-Factor Authentication that works well with Zimbra open source edition.
One of the products I looked at - eToken PASS(http://www.safenet-inc.com/multi-factor-...
- 421
0
votes
0
answers
158
views
Is the configuration I want possible? Problems with SSH to Redhat server using google authentication 2fa
I'm attempting to configure two factor authentication when using SSH to connect to my redhat ec2 instance.
I would like to configure it like this:
If user has both ssh key and google auth set up, ...
- 1
0
votes
2
answers
205
views
Implementing 2 -Factor Authentication
My company access a Third-party website, that uses a simple username + password authentication method. This vendor could restrict the application access (website) to a defined ip range.
We are trying ...
- 101
0
votes
1
answer
3k
views
What's the easiest way to integrate Authy (two-factor) authentication with Apache httpd?
EDIT: Something similar to Authy would work too, if that service was i) hosted/SaaS and ii) able to send SMS messages.
Most examples advocate RADIUS for two-factor authentication but I'm already ...
- 121
-2
votes
1
answer
487
views
Does iphone Touch ID count as 2FA? [closed]
Yes it does because
The customer has the physical iPhone
The customer 'is' the owner of the fingerprint
But no it doesn't because
1=>2 : If you steal the customer's iphone, the fingerprint is now ...
- 187