Questions tagged [google-authenticator]
Google Authenticator is a TOTP (Time based One Time Password) PAM (Pluggable Authentication Module) which is supported and serviced by Google.
63
questions
0
votes
0
answers
95
views
how to set up eat /etc/pam.d/radiusd file to authenticate a user with his username, password and Google Authenticator token. Using Freeradius for 2FA
i have a problem about configuring the “/etc/pam.d/radiusd” file.
I am working on a Linux Debian System.
rn this is my configuration:
auth requisite pam_google_authenticator.so forward_pass
auth ...
0
votes
0
answers
112
views
SSH won't ask for 2FA code
I'm trying to confiugre SSH 2FA on a Debian 11 server with Google Authenticator.
I have password login disabled,only publickey-login is allowed.
I already followed this and this guide, but without ...
- 1
0
votes
0
answers
13
views
Guard Authenticator hits
we have our codebase installed and rolling our from Google App Engine, using Compute Engine as well.
When looking back at the logs for a particular VM, I'm see a LOT of "Checking support on guard ...
google-cloud-platform
0
votes
1
answer
501
views
Google Credential Provider for Windows with Yubikey 2FA
Can I use my Yubikey hardware 2FA with Google Credential Provider for Windows (GCPW)?
At the moment I am asked to sign in again the only option is Google Authenticator, and a few more but the Yubikey ...
- 113
1
vote
1
answer
393
views
Enforcing 2FA configuration on next SSH login for every user
I have found numerous tutorials on how to enable 2FA (TOTP, RFC 6238) but is there also a way to force SSH users to configure it on the first login? (I am using OpenSSH server)
I guess I could create ...
- 65
2
votes
1
answer
427
views
SSH authentication: (public key xor password) + google authenticator code
I'm using Debian bullseye. I'm trying to set up SSH two types logins:
password + code from Google's Authenticator (if user set it, "nullok" option),
public key + code from Google's ...
- 21
0
votes
1
answer
209
views
PAM permit works only when dummy suffix is added
I am trying to use PAM to authenticate OpenVPN against 2FA (not important info). Here is my PAM configuration:
account required pam_permit.so
auth required pam_google_authenticator.so ...
5
votes
2
answers
3k
views
SSH public key authentication with google authenticator still asks for password
I'm trying to enable 2FA with ssh using libpam-google-authenticator. Not all users need authenticator enabled. Everybody uses ssh public keys, and nobody has a password. I'm running Debian buster, and ...
- 201
0
votes
0
answers
952
views
Google Authentication works on localhost, but not on domain
Google Authentication works on localhost, but not on domain (see attached gifs).
Why does authentication work for localhost but not on domain cpspmo.com? I have added https://www.cpspmo to as an ...
1
vote
1
answer
1k
views
MS RRAS + MS VPN Client + Google Authenticator + SecureMFA
I'm running on-premise Windows Server 2019 domain, and Microsoft RRAS to allow remote users access to the local network. Remote users are using the built-in Microsoft VPN SSTP for Windows 10 clients ...
- 11
0
votes
1
answer
2k
views
sshd_config changes in Ubuntu 20.04
I noticed in in Ubuntu 20.04 in /etc/ssh/sshd_config what appears to be the introduction of a new line on the very 1st line of sshd_config. It reads:
Include /etc/ssh/sshd_config.d/*.conf
What is ...
- 165
1
vote
2
answers
14k
views
How to configure PAM to authenticate SSH logins with (password & OTP) or (public key & OTP)
My goal is to develop an ansible playbook to deploy multifactor ssh logins of the type (public key and OTP) or (password and OTP) on Ubuntu Server 18.04 hosts.
I followed the guide here and it ...
- 111
0
votes
2
answers
510
views
GSuite: how to change authenticator device?
I'm GSuite admin for my domains. I have a new phone. How do I get a new QR for Google Authenticator.
I've been clicking around and don't see it anywhere.
- 101
1
vote
0
answers
594
views
How to disable global 2FA policy with CLI
I would like to ask if it's possible to disable the global 2FA policy (everyone need to activate 2FA before accessing gitlab) but I can't disable on the web interface because I can't activate it, it ...
- 217
0
votes
1
answer
3k
views
Linux PAM: SSH key + 2FA (google authenticator) + password - Specify auth requirements per user
I have installed and configured PAM on my Ubuntu server which is working correctly. To log in I want to require an SSH Key to be installed, a password to be provided and a valid code from an ...
- 131
1
vote
0
answers
2k
views
SSH disabling google-authenticator from specific IP
I have setup google-authenticator as 2FA together with publickey authentication. What I need is to skip the 2FA when connecting by SSH from specific IP.
I'm running Ubuntu 18.04.
Relevant snippet ...
- 176
1
vote
1
answer
1k
views
google-authenticator codes not working while emergency scratch codes do it right
Installing google-authenticator on a Debian behind another Debian firewall in a very restricted configuration on connectivity
(NetinVM, a virtual machine constellation inside a VM)
Installation goes ...
- 15
0
votes
0
answers
671
views
Is using HOTP only authorization considered weak?
I have seen many experts advising usage of some kind of OTP as second step of 2FA schemes.
I fully understand 2FA is more secure than Single Authorization, but it is also more inconvenient for casual ...
- 296
3
votes
1
answer
2k
views
Require SSH key + Google Authenticator for one account, SSH key only for another
I am trying to setup an SSH authentication structure, but I'm struggling with issues in /etc/ssh/sshd_config vs /etc/pam.d/sshd.
Requirements:
Accounts with root/sudo privileges
require public key ...
- 131
2
votes
1
answer
1k
views
Ubuntu-18.04 and libpam-google-authenticator not prompting for keyboard-interactive
On a new Ubuntu 18.04.1 LTS (GNU/Linux 4.15.0-1017-aws x86_64), I have installed Google Authenticator [1] and configured it in the following way
/etc/pam.d/sshd
#@include common-auth
...
auth ...
- 796
6
votes
1
answer
3k
views
OpenVPN 2.4 + Google Authenticator = authentication failure
We have a corporate VPN server running OpenVPN 2.3 on an AWS instance with Ubuntu 16.04 Xenial. The server has been configured using an Ansible playbook.
I'm planning to upgrade to Ubuntu 18.04 ...
- 453
1
vote
1
answer
175
views
Access of users using google-authenicator without token
I'm using google authenticator pam module on CentOS to create a 2FA authentication for my users, however, I want that only the users that have already registered with the authenticator are asked to ...
0
votes
0
answers
140
views
Is the configuration I want possible? Problems with SSH to Redhat server using google authentication 2fa
I'm attempting to configure two factor authentication when using SSH to connect to my redhat ec2 instance.
I would like to configure it like this:
If user has both ssh key and google auth set up, ...
- 1
1
vote
1
answer
392
views
OpenVPN MFA without unix users
Have you guys have an idea is it possible to configure OpenVPN with pam_google_authenticator.so with no need to authenticate using username/password but only cert + TOTP? I don't want to create a new ...
- 21
0
votes
0
answers
29
views
Multi-Factor Authentication varieties and is there a universal bridge for them
I am trying to research a project on how to connect to multiple enterprise environments that employ multi-factor authentication using a singular approach. My question is, are there any systems out ...
- 101
1
vote
0
answers
323
views
Google authenticator on Windows
I need to setup Google Authenticator on MS Windows server to implement 2-factor authentication for a web application.
Which server software is the best to use for this purpose?
- 371
0
votes
1
answer
1k
views
RHEL 7 google-authenticator publickey only with optional MFA
I am trying to setup MFA on RHEL 7 and running into a chicken and egg problem. If I enable MFA in pam you can't login to setup your .google-authenticator file. I understand that the nullok option in ...
- 1
2
votes
3
answers
4k
views
Google-authenticator with openvpn - AUTH: Received control message: AUTH_FAILED
I'm trying to set up MFA with Google authenticator for my OpenVPN setup on Ubuntu 16.04. Now OpenVPN works fine until I bring Google Authenticator into the mix.
My server.conf file reads as follows:
...
2
votes
1
answer
3k
views
Google Authenticator PAM on SSH blocks root login without 2FA
Situation:
I have activated Google Authenticator 2FA for SSH logins on Ubuntu 16.04 but made it optional in the /etc/pam.d/sshd:
auth required pam_google_authenticator.so nullok
I have setup the ...
- 23
0
votes
0
answers
2k
views
Google Authenticator on Nginx
I built Nginx with ngx_http_auth_pam_module and edited Nginx configurations and /etc/pam.d/nginx like this
Part of virtual host setting
location / {
root /projects/admin;
index index.html ...
2
votes
1
answer
4k
views
Google Authenticator FreeRADIUS
I'm trying to implement google authenticator PAM module in FreeRADIUS on RHEL7.
I've loosely followed this guide: http://www.supertechguy.com/help/security/freeradius-google-auth
The reason I say ...
0
votes
1
answer
44
views
Google authenticator QR code scan work in any mobile
I'm using google authenticator code for 2FA in my website. Can able to check QR code is scanned from registered mobile number? Now, i can able to scan the code from any mobile
0
votes
1
answer
132
views
PAM Ignore Password Prompt Upon Successful Login
I have a CentOS 7 server that uses key based authentication for login, along with using Google Authenticator for two-factor authentication.
I am wishing to set it up, so that upon a successful login (...
1
vote
1
answer
3k
views
Tacacs+ with PAM two-factor Google authentication?
I'm working on a tacacs+ server for my campus network, and I have been wondering how I could set up a tacacs+ server to communicate to PAM running google's two-factor authentication. I've done quite a ...
- 13
1
vote
1
answer
300
views
Logout user if they break a bashrc command
I'm running a small script when a user accesses my Linux host via SSH. This script should verify and/or set up Google Authenticator MFA access for the user.
Right now it works as intended with one ...
- 151
1
vote
2
answers
6k
views
How to automate google-authenticator MFA configuration for SSH access
At my company we currently have a SSH jump server of sorts, through which our workers access our clients' server endpoints. We have setup a couple of Ansible playbooks that essentially create/remove/...
- 151
4
votes
1
answer
6k
views
SSH Google Authenticator Ignore/Whitelist ips
I installed google authenticator (two step verification), "libpam-google-authenticator" package, although it asks for a code for every single connection to SSH. I want to put localhost and my own ip ...
- 432
6
votes
1
answer
593
views
How to set-up google-authenticator and set specific match rules to allow different login rules?
I'm trying to set Google-Authenticator (google 2 factor authentication).
The relevant files are:
[root@srv01 ~]# cat /etc/pam.d/sshd
#%PAM-1.0
auth required pam_google_authenticator.so
auth ...
- 10.7k
0
votes
1
answer
1k
views
Server allows logging in without supplying a password and no ssh keys were exchanged, what could be the reason?
I'm trying to secure an outbound server with Google 2FA solution.
For the time being, I'm first configuring everything on a local Vagrant machine and once everything works as intended I'll run it as ...
- 10.7k
2
votes
2
answers
7k
views
How to configure pam sshd to allow different rules on different users/groups?
I'm configuring google two-factor authentication on an outbound server in the company I work for.
Here are the relevant configurations:
/etc/ssh/sshd_config:
ubuntu@stage-itai-1:~$ egrep -v '^#' /...
- 10.7k
0
votes
1
answer
201
views
Google-2fa: How to recover an account when emergency codes are not available? [closed]
There's a server in my company which is configured with Google two-factor authentication.
A user from the company has lost his phone and can't find his emergency codes.
What can be done in order to ...
- 10.7k
1
vote
1
answer
84
views
What is the right way to back up google authenticator emergency keys?
I'm implementing Google 2-Factor Authentication on some servers in my company.
When configuring Google 2FA on client computers, 5 emergency codes are generated to be used if a user forgets his master ...
- 10.7k
1
vote
0
answers
1k
views
MS Active Directory with Google Authenticator
I am currently designing our new internal IT services, including IAM and e-mail. We currently use more or less no IAM or single sign-on solution. We have a WordPress based website, postfix + dovecot ...
- 63
4
votes
2
answers
219
views
industry standards for using google-authenticator with linux users?
Would like to ask, particularly those who run large environments with lots of users, if there are any standardized- or industry-recommended ways to securely distribute the verification codes to remote ...
- 2,655
0
votes
1
answer
121
views
How to enable Google Authenticator over sshd when already using public key?
I'm running Debian Jessie on a VPS.
I want to enable both private key and Google Authenticator to get into the server via SSH.
I enabled
auth required pam_google_authenticator.so
in ...
- 19
11
votes
2
answers
16k
views
How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?
I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a ...
- 249
1
vote
1
answer
3k
views
SSH Authentication using RADIUS + Google Authenticator
I'm trying configure my SSHD's to authenticate users using FreeRadius. The FreeRadius server needs to first require a valid OTP using Google Authenticator, and then verify the system account password.
...
- 171
3
votes
0
answers
660
views
PAM Google Authenticator With SFTP And Other Apps
I'm attempting to set up a situation where SSH Authorized Key + Google Authenticator Code is sufficient to ssh into the server.
This is working fine for normal SSH terminal operations - I'm prompted ...
- 31
1
vote
1
answer
4k
views
google-authenticator for two-factor-authentication support with openvpn client on linux
I am trying to get openvpn client to work with google-authenticator and two-factor-authentication. I cannot alter the server in any way (i.e. I cannot do password/token concactenation via pam mods, ...
- 2,021
0
votes
0
answers
117
views
Public key authentication plus challenge authentication
I am trying to setup 2-phase authentication based on this guide, but instead of entering the password I would like public key to be involved.
If PubkeyAuthentication yes in /etc/ssh/sshd_conf then 2 ...
- 123
Related Tags
pam × 26
ssh × 24
authentication × 9
linux × 8
ubuntu × 6
freeradius × 6
debian × 5
openvpn × 5
two-factor × 4
ubuntu-18.04 × 4
redhat × 4
security × 3
adfs × 2
active-directory × 2
centos × 2
ldap × 2
radius × 2
password × 2
vpn × 2
windows × 2
verification × 1
vagrant × 1
ubuntu-20.04 × 1
more related tags
Hot Network Questions
- What happened with Ros?
- What software can I use to draw circuit diagrams like this?
- How to write instrument names in a standard professional way in the sheet music
- What to do with a mathematical article rejected from a journal because the anonymous referee found a simpler proof?
- C# and C++ Inheritance and Performance - Shouldn't Compilers Handle this Issue?
- Fallacy of the Devil You Know
- Why wasn't the fraud lawsuit against Trump thrown out?
- How to write a duplicate mapping function?
- Where does Pages store its list of recently opened documents?
- Perl: change in interpretation of shell symbols in system() invocation?
- I irradiate your source code, you irradiate your output
- Why can't I apply for a visa from my home country when I am currently resident in another country?
- Why do numbers apply to such disparate concepts?
- Print 100 digits of π
- Cases syntax when expression sought is a Quantity
- Why can't I read the phrase ויולך יהוה את־הים in Exodus 14:21 as "And God walked in the Sea"?
- When does a group act effectively and holomorphically on some Riemann surface?
- Fix spacing in custom matrix environment
- State of language in the hunter-gatherer era of Europe / Levant?
- Difference between "is come" and "has come"
- Affiliation for High Schooler who is submitting a Research Paper that was conducted at a university
- Detect catcode of next character?
- How to know if the model is underfitting because the data is hard to model, or just the model is too simplistic?
- How can I convert a QR code from JPG to SVG with perfect clean squares?