Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [two-factor]

The tag has no usage guidance.

-2
votes
1answer
58 views

Does iphone Touch ID count as 2FA? [closed]

Yes it does because The customer has the physical iPhone The customer 'is' the owner of the fingerprint But no it doesn't because 1=>2 : If you steal the customer's iphone, the fingerprint is now ...
0
votes
0answers
76 views

Is the configuration I want possible? Problems with SSH to Redhat server using google authentication 2fa

I'm attempting to configure two factor authentication when using SSH to connect to my redhat ec2 instance. I would like to configure it like this: If user has both ssh key and google auth set up, ...
0
votes
0answers
31 views

OpenSSH with OATH from WAN and without from LAN

I have placed a simple ARM based Debian machine in a DMZ and I would like to set up an SSH proxy into my network. To do this, I would like to require anybody connecting from the WAN to provide a key ...
0
votes
2answers
162 views

Implementing 2 -Factor Authentication

My company access a Third-party website, that uses a simple username + password authentication method. This vendor could restrict the application access (website) to a defined ip range. We are trying ...
9
votes
1answer
628 views

Ansible - Access through Bastion w/ MFA

In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled. I've managed to get Ansible to successfully talk to servers through the bastion, ...
12
votes
2answers
813 views

SSH Two-Factor auth (2FA) with a yubikey

So I've got this slick little yubikey and I want to add an additional layer of security when authenticating ssh sessions. On the server side I've already disabled password authentication and only ...
1
vote
1answer
2k views

How to Configure Roundcube/Dovecot for *Effective* 2-Factor Authentication

There are several Roundcube plugins that provide two-factor authentication. However, the issue I now see is that I can still simply log in via IMAP/SMTP, without 2-FA (obviously). 2-FA is (effectively)...
1
vote
0answers
463 views

PAM Google Authenticator With SFTP And Other Apps

I'm attempting to set up a situation where SSH Authorized Key + Google Authenticator Code is sufficient to ssh into the server. This is working fine for normal SSH terminal operations - I'm prompted ...
1
vote
2answers
178 views

Two factor SSH authentication on multiple servers

I am a newbie when it comes to Two factor authentication. I have the general idea of implementing two factor authentication on a single server. But I was wondering if there is a standard solution for ...
0
votes
1answer
2k views

What's the easiest way to integrate Authy (two-factor) authentication with Apache httpd?

EDIT: Something similar to Authy would work too, if that service was i) hosted/SaaS and ii) able to send SMS messages. Most examples advocate RADIUS for two-factor authentication but I'm already ...
1
vote
0answers
367 views

OSX two-factor Authentication for ARD and VNC

I am looking at the possibility to add two-factor authentication , using linOTP and Radius, to all network logins ( Servers, Workstations, Switches, etc... ) So far I have been able to set this up for ...
3
votes
4answers
4k views

PAM, RADIUS, Google Authenticator and Two Factor Auth

I have setup FreeRADIUS, PAM and the Google Authtenicator. FreeRADIUS calls PAM, which in turn calls the Google pam_google_authenticator.so libary. That all works successfully. However, that's not ...
0
votes
1answer
3k views

Two-Factor Authentication for Zimbra

I have been looking for a Two-Factor Authentication that works well with Zimbra open source edition. One of the products I looked at - eToken PASS(http://www.safenet-inc.com/multi-factor-...
19
votes
3answers
18k views

Trying to get SSH with public key (no password) + google authenticator working on Ubuntu 14.04.1

I'm using Ubuntu 14.04.1 (with OpenSSH 6.6 and libpam-google-authenticator 20130529-2). I'm trying to set up SSH logins where the public key authenticates (without a password) and a user is prompted ...
0
votes
1answer
796 views

ssh tunnel through two-factor auth

I need to connect to server using SSH, and the server has two-factor authentication enabled and secretkey disabled. Now, I can connect "manually" form the shell with the help of Google authenticator ...
1
vote
2answers
4k views

Boot Windows Azure into Safe Mode

If I only have access to the Azure web interface (eg: no RDP access) is there any way I can boot a windows Azure VM into safe mode AND remotely access it?
3
votes
2answers
2k views

freeradius two factor without factor concatenation

I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN. All ...
2
votes
0answers
671 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
7
votes
1answer
3k views

Combination of SSH key auth, and two-factor authentication

I was wondering if it is possible to accomplish the following, all at the same time: Disable root logins Enable SSH login for personal user, only via SSH keys Enable SSH login for unprivileged user, ...
1
vote
1answer
57 views

SSH listen on 2 ports, With a single config

Im trying to make SSH logins require 2 factor auth but only on one port. So port 1 is open only to a list of ip's managed by iptables. and only requires password / key port 2 is open to all, But ...
10
votes
1answer
5k views

Two Factor SSH Authentication on external address only

I have an Ubuntu server with both a private, internal, IP and a public-facing IP. I want to set up two-factor authentication for SSH on just the public side. Is this possible? I was planning on using ...
3
votes
1answer
877 views

Implementing a form of port knocking + Phone Factor = 2 Factor auth for RDP?

I have been looking into how to secure a publicly-available RDP endpoint and want to implement our two-factor authentication RADIUS server, PhoneFactor. I would like to implement the following process:...
30
votes
7answers
7k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
6
votes
2answers
4k views

Keeping Private SSH Keys Safe

I have a central server where I stored all the private ssh keys to the different machines that I want to ssh to. Currently, only sysadmins have access to this 'central' server. Given the above ...
5
votes
5answers
9k views

looking for opensource 2 factor authentication server [closed]

i'm looking for opensource 2 factor authentication service. (Right now we're using openLDAP.) We're just using Linux Servers. That's why the service should work well with PAM Linux. It would also be ...
3
votes
1answer
84 views

Is RSA's SecureID anyless secure in light of the attacks exploiting them?

Additionally, is two-factor authentication in general less secure, and if so, why?
2
votes
1answer
420 views

PAM example of performing authentication using a custom external script?

I've heard that you can use pam_exec to call an external script, and have that external script perform the actual authentication. Can anyone provide an example of doing this?
7
votes
5answers
5k views

Two Factor Authentication on EC2

I need to host stuff for a financial institution on EC2. The bank wants complete Two Factor Authentication so Stuff like having SSH with a key with password. Something like SecureID or similar would ...