101 reputation
1
bio website
location
age
visits member for 3 years, 6 months
seen Aug 14 '13 at 8:47

Jul
31
comment SSH: Two Factor Authentication
This was correct, but has now changed. openssh 6.2 adds an AuthenticationMethods configuration paramaeter that can flip this. Now you can require both.
Jul
31
comment SSH: Two Factor Authentication
openssh 6.2 has landed in the development release of Ubuntu, so save for any disasters this support will be in the expected 13.10 release. It uses upstream's AuthenticationMethods to specify multiple required methods, so that you can require both an ssh key and PAM, with PAM doing the Google Authenticator end.
Jan
18
comment SSH: Two Factor Authentication
And here's an upstream openssh bug. It looks like similiar functionality will be upstream in openssh soon.
Jan
18
comment Can sshd authenticate each incoming connection with both a key AND a password?
Also see this answer over at serverfault.com. It looks like RHEL have patched openssh with similar functionality.
Jan
18
comment SSH: Two Factor Authentication
I've found the corresponding bug and some further notes. The bug includes the patch as an attachment.
Jan
18
comment SSH: Two Factor Authentication
If you have a passphrase-encrypted private key, you only prove one thing to the server: that your client knows the private key. It doesn't prove to the server that you know your passphrase; the server doesn't even know about the existence of your passphrase. Therefore it is only "something you know" (since your client knows it) and only one factor. If an attacker gets hold of just one thing (your private key) then you are compromised. That's one factor. Arguing that your passphrase and private key count as two factors is just an exercise in sophistry. What counts is what happens on the wire.
Feb
19
answered sshd shuts down with “No supported key exchange algorithms” error
Dec
28
awarded  Supporter
Oct
17
answered Create VPN for single computers located in different regions