Questions tagged [google-authenticator]

Google Authenticator is a TOTP (Time based One Time Password) PAM (Pluggable Authentication Module) which is supported and serviced by Google.

Filter by
Sorted by
Tagged with
0
votes
0answers
29 views

Setting up google-authenticator-libpam (TOTP/HOTP) for authentication in combination with pam-mysql for vsftpd

I have a setup in which virtual users for vsftpd (latest, 3.0.3) are authenticated against a MySQL database using pam-MySQL[1]. This works perfectly fine, configured like this: auth required /lib/...
0
votes
0answers
31 views

FreeRADIUS + PAM + Google Authenticator + PBIS-Open Bypass by Group

I'm setting up a 2FA server to authenticate users for a VMware Horizon View system from a Microsoft AD using Ubuntu Server 20.04 with FreeRADIUS 3.0, libpam-google-authenticator and PBIS-Open for ...
0
votes
0answers
56 views

How to configure PAM to authenticate SSH logins with (password & OTP) or (public key & OTP)

My goal is to develop an ansible playbook to deploy multifactor ssh logins of the type (public key and OTP) or (password and OTP) on Ubuntu Server 18.04 hosts. I followed the guide here and it ...
0
votes
2answers
28 views

GSuite: how to change authenticator device?

I'm GSuite admin for my domains. I have a new phone. How do I get a new QR for Google Authenticator. I've been clicking around and don't see it anywhere.
0
votes
0answers
67 views

keyboard-interactive not recognizing pam_google_authenticator.so

I followed the steps here to enable google-authenticator based 2FA for ssh. However, I think that ssh is ignoring the keyboard-interactive authentication method. This is the verbose ssh output: ...
0
votes
0answers
55 views

SSH with priv key and google authenticator and SFTP

I followed a guide on how to setup SSH using private key and google authenticator and it works fine... I disabled Rootaccess, setupup privatekey and the authenticator. Then I was trying to enable ...
1
vote
0answers
81 views

How to disable global 2FA policy with CLI

I would like to ask if it's possible to disable the global 2FA policy (everyone need to activate 2FA before accessing gitlab) but I can't disable on the web interface because I can't activate it, it ...
0
votes
0answers
72 views

2-Factor Authentication Using Puppet

I applied 2 factor authentication using google-authenticator by applying a puppet manifest to a centos server. I have made all the changes that are required to sshd_config and pam.d/sshd files. But ...
0
votes
1answer
590 views

Linux PAM: SSH key + 2FA (google authenticator) + password - Specify auth requirements per user

I have installed and configured PAM on my Ubuntu server which is working correctly. To log in I want to require an SSH Key to be installed, a password to be provided and a valid code from an ...
0
votes
0answers
326 views

SSH disabling google-authenticator from specific IP

I have setup google-authenticator as 2FA together with publickey authentication. What I need is to skip the 2FA when connecting by SSH from specific IP. I'm running Ubuntu 18.04. Relevant snippet ...
0
votes
1answer
246 views

google-authenticator codes not working while emergency scratch codes do it right

Installing google-authenticator on a Debian behind another Debian firewall in a very restricted configuration on connectivity (NetinVM, a virtual machine constellation inside a VM) Installation goes ...
0
votes
0answers
647 views

Is using HOTP only authorization considered weak?

I have seen many experts advising usage of some kind of OTP as second step of 2FA schemes. I fully understand 2FA is more secure than Single Authorization, but it is also more inconvenient for casual ...
2
votes
1answer
675 views

Require SSH key + Google Authenticator for one account, SSH key only for another

I am trying to setup an SSH authentication structure, but I'm struggling with issues in /etc/ssh/sshd_config vs /etc/pam.d/sshd. Requirements: Accounts with root/sudo privileges require public key ...
1
vote
1answer
651 views

Ubuntu-18.04 and libpam-google-authenticator not prompting for keyboard-interactive

On a new Ubuntu 18.04.1 LTS (GNU/Linux 4.15.0-1017-aws x86_64), I have installed Google Authenticator [1] and configured it in the following way /etc/pam.d/sshd #@include common-auth ... auth ...
3
votes
0answers
1k views

OpenVPN 2.4 + Google Authenticator = authentication failure

We have a corporate VPN server running OpenVPN 2.3 on an AWS instance with Ubuntu 16.04 Xenial. The server has been configured using an Ansible playbook. I'm planning to upgrade to Ubuntu 18.04 ...
1
vote
1answer
51 views

Access of users using google-authenicator without token

I'm using google authenticator pam module on CentOS to create a 2FA authentication for my users, however, I want that only the users that have already registered with the authenticator are asked to ...
0
votes
0answers
93 views

Is the configuration I want possible? Problems with SSH to Redhat server using google authentication 2fa

I'm attempting to configure two factor authentication when using SSH to connect to my redhat ec2 instance. I would like to configure it like this: If user has both ssh key and google auth set up, ...
1
vote
1answer
215 views

OpenVPN MFA without unix users

Have you guys have an idea is it possible to configure OpenVPN with pam_google_authenticator.so with no need to authenticate using username/password but only cert + TOTP? I don't want to create a new ...
0
votes
0answers
26 views

Multi-Factor Authentication varieties and is there a universal bridge for them

I am trying to research a project on how to connect to multiple enterprise environments that employ multi-factor authentication using a singular approach. My question is, are there any systems out ...
1
vote
0answers
262 views

Google authenticator on Windows

I need to setup Google Authenticator on MS Windows server to implement 2-factor authentication for a web application. Which server software is the best to use for this purpose?
0
votes
1answer
924 views

RHEL 7 google-authenticator publickey only with optional MFA

I am trying to setup MFA on RHEL 7 and running into a chicken and egg problem. If I enable MFA in pam you can't login to setup your .google-authenticator file. I understand that the nullok option in ...
2
votes
3answers
2k views

Google-authenticator with openvpn - AUTH: Received control message: AUTH_FAILED

I'm trying to set up MFA with Google authenticator for my OpenVPN setup on Ubuntu 16.04. Now OpenVPN works fine until I bring Google Authenticator into the mix. My server.conf file reads as follows: ...
1
vote
1answer
1k views

Google Authenticator PAM on SSH blocks root login without 2FA

Situation: I have activated Google Authenticator 2FA for SSH logins on Ubuntu 16.04 but made it optional in the /etc/pam.d/sshd: auth required pam_google_authenticator.so nullok I have setup the ...
0
votes
0answers
2k views

Google Authenticator on Nginx

I built Nginx with ngx_http_auth_pam_module and edited Nginx configurations and /etc/pam.d/nginx like this Part of virtual host setting location / { root /projects/admin; index index.html ...
2
votes
1answer
2k views

Google Authenticator FreeRADIUS

I'm trying to implement google authenticator PAM module in FreeRADIUS on RHEL7. I've loosely followed this guide: http://www.supertechguy.com/help/security/freeradius-google-auth The reason I say ...
0
votes
1answer
37 views

Google authenticator QR code scan work in any mobile

I'm using google authenticator code for 2FA in my website. Can able to check QR code is scanned from registered mobile number? Now, i can able to scan the code from any mobile
0
votes
1answer
97 views

PAM Ignore Password Prompt Upon Successful Login

I have a CentOS 7 server that uses key based authentication for login, along with using Google Authenticator for two-factor authentication. I am wishing to set it up, so that upon a successful login (...
1
vote
1answer
2k views

Tacacs+ with PAM two-factor Google authentication?

I'm working on a tacacs+ server for my campus network, and I have been wondering how I could set up a tacacs+ server to communicate to PAM running google's two-factor authentication. I've done quite a ...
1
vote
1answer
127 views

Logout user if they break a bashrc command

I'm running a small script when a user accesses my Linux host via SSH. This script should verify and/or set up Google Authenticator MFA access for the user. Right now it works as intended with one ...
1
vote
2answers
4k views

How to automate google-authenticator MFA configuration for SSH access

At my company we currently have a SSH jump server of sorts, through which our workers access our clients' server endpoints. We have setup a couple of Ansible playbooks that essentially create/remove/...
2
votes
1answer
3k views

SSH Google Authenticator Ignore/Whitelist ips

I installed google authenticator (two step verification), "libpam-google-authenticator" package, although it asks for a code for every single connection to SSH. I want to put localhost and my own ip ...
6
votes
1answer
428 views

How to set-up google-authenticator and set specific match rules to allow different login rules?

I'm trying to set Google-Authenticator (google 2 factor authentication). The relevant files are: [root@srv01 ~]# cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_google_authenticator.so auth ...
0
votes
1answer
373 views

Server allows logging in without supplying a password and no ssh keys were exchanged, what could be the reason?

I'm trying to secure an outbound server with Google 2FA solution. For the time being, I'm first configuring everything on a local Vagrant machine and once everything works as intended I'll run it as ...
1
vote
2answers
4k views

How to configure pam sshd to allow different rules on different users/groups?

I'm configuring google two-factor authentication on an outbound server in the company I work for. Here are the relevant configurations: /etc/ssh/sshd_config: ubuntu@stage-itai-1:~$ egrep -v '^#' /...
0
votes
1answer
126 views

Google-2fa: How to recover an account when emergency codes are not available? [closed]

There's a server in my company which is configured with Google two-factor authentication. A user from the company has lost his phone and can't find his emergency codes. What can be done in order to ...
1
vote
1answer
68 views

What is the right way to back up google authenticator emergency keys?

I'm implementing Google 2-Factor Authentication on some servers in my company. When configuring Google 2FA on client computers, 5 emergency codes are generated to be used if a user forgets his master ...
1
vote
0answers
882 views

MS Active Directory with Google Authenticator

I am currently designing our new internal IT services, including IAM and e-mail. We currently use more or less no IAM or single sign-on solution. We have a WordPress based website, postfix + dovecot ...
4
votes
2answers
94 views

industry standards for using google-authenticator with linux users?

Would like to ask, particularly those who run large environments with lots of users, if there are any standardized- or industry-recommended ways to securely distribute the verification codes to remote ...
0
votes
1answer
88 views

How to enable Google Authenticator over sshd when already using public key?

I'm running Debian Jessie on a VPS. I want to enable both private key and Google Authenticator to get into the server via SSH. I enabled auth required pam_google_authenticator.so in ...
11
votes
2answers
10k views

How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?

I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a ...
1
vote
1answer
2k views

SSH Authentication using RADIUS + Google Authenticator

I'm trying configure my SSHD's to authenticate users using FreeRadius. The FreeRadius server needs to first require a valid OTP using Google Authenticator, and then verify the system account password. ...
2
votes
0answers
567 views

PAM Google Authenticator With SFTP And Other Apps

I'm attempting to set up a situation where SSH Authorized Key + Google Authenticator Code is sufficient to ssh into the server. This is working fine for normal SSH terminal operations - I'm prompted ...
0
votes
1answer
3k views

google-authenticator for two-factor-authentication support with openvpn client on linux

I am trying to get openvpn client to work with google-authenticator and two-factor-authentication. I cannot alter the server in any way (i.e. I cannot do password/token concactenation via pam mods, ...
0
votes
0answers
105 views

Public key authentication plus challenge authentication

I am trying to setup 2-phase authentication based on this guide, but instead of entering the password I would like public key to be involved. If PubkeyAuthentication yes in /etc/ssh/sshd_conf then 2 ...
1
vote
1answer
1k views

Google Authenticator - generate new set of emergency codes

I use Google Authenticator on my SSH servers with Andoid app for generating codes. After I run $ google-authenticator application create set of emergyncy keys: https://www.google.com/chart?chs=...
21
votes
3answers
23k views

Trying to get SSH with public key (no password) + google authenticator working on Ubuntu 14.04.1

I'm using Ubuntu 14.04.1 (with OpenSSH 6.6 and libpam-google-authenticator 20130529-2). I'm trying to set up SSH logins where the public key authenticates (without a password) and a user is prompted ...
1
vote
0answers
420 views

FreeRadius-GoogleAuthenticator-Kerberos Password Change Weirdness

We are using FreeRadius, Kerberos and Google Authenticator to implement two-factor authentication. The two factor auth works fine, both from radtest and from a Watchguard firewall. To log in, a user ...
4
votes
2answers
3k views

Public-Key -or- Password & Google Authenticator for SSH Login

I found an article (http://www.howtogeek.com/121650/how-to-secure-ssh-with-google-authenticators-two-factor-authentication/) that explains how to configure OpenSSH to ask for a Google Authenticator ...
0
votes
2answers
2k views

How do I create a custom ADFS 2nd factor sign in page?

I have a C# dll that provides HOTP and TOTP authentication. I'd like to adapt this for use with ADFS sign in pages. (I'll share this DLL with you if you like) How do I integrate my authentication ...
2
votes
1answer
740 views

Git github not working with google authenticator OSX

So I had git running on my computer just fine. My password was saved with the osxkeychain thingy and everything ran smoothly. Today I decided I should be safe and enable google authenticator 2-step ...