Questions tagged [two-factor]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
4 votes
2 answers
1k views

SSH public key authentication with google authenticator still asks for password

I'm trying to enable 2FA with ssh using libpam-google-authenticator. Not all users need authenticator enabled. Everybody uses ssh public keys, and nobody has a password. I'm running Debian buster, and ...
user avatar
0 votes
1 answer
164 views

Security of a hardware token vs software token for two-factor authentication

Surprisingly I don't see this question on ServerFault already. I'm wondering about the pros and cons of hardware token vs software token for two-factor authentication - only in the context of ...
user avatar
3 votes
0 answers
2k views

Setup 2FA/MFA on Jenkins

I'm trying to find how to setup 2FA/MFA on users who login to Jenkins, with Google Authenticator. Everything I'm finding is about logins to servers/git/etc, but not for the actual USERS in Jenkins. ...
user avatar
  • 451
-2 votes
1 answer
448 views

Does iphone Touch ID count as 2FA? [closed]

Yes it does because The customer has the physical iPhone The customer 'is' the owner of the fingerprint But no it doesn't because 1=>2 : If you steal the customer's iphone, the fingerprint is now ...
user avatar
0 votes
0 answers
129 views

Is the configuration I want possible? Problems with SSH to Redhat server using google authentication 2fa

I'm attempting to configure two factor authentication when using SSH to connect to my redhat ec2 instance. I would like to configure it like this: If user has both ssh key and google auth set up, ...
user avatar
  • 1
0 votes
2 answers
200 views

Implementing 2 -Factor Authentication

My company access a Third-party website, that uses a simple username + password authentication method. This vendor could restrict the application access (website) to a defined ip range. We are trying ...
user avatar
9 votes
1 answer
1k views

Ansible - Access through Bastion w/ MFA

In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled. I've managed to get Ansible to successfully talk to servers through the bastion, ...
user avatar
13 votes
2 answers
2k views

SSH Two-Factor auth (2FA) with a yubikey

I have got this slick little yubikey and I want to add an additional layer of security when authenticating ssh sessions. On the server side I've already disabled password authentication and only ...
user avatar
2 votes
1 answer
3k views

How to Configure Roundcube/Dovecot for *Effective* 2-Factor Authentication

There are several Roundcube plugins that provide two-factor authentication. However, the issue I now see is that I can still simply log in via IMAP/SMTP, without 2-FA (obviously). 2-FA is (effectively)...
user avatar
  • 31
2 votes
0 answers
627 views

PAM Google Authenticator With SFTP And Other Apps

I'm attempting to set up a situation where SSH Authorized Key + Google Authenticator Code is sufficient to ssh into the server. This is working fine for normal SSH terminal operations - I'm prompted ...
user avatar
  • 21
1 vote
2 answers
457 views

Two factor SSH authentication on multiple servers

I am a newbie when it comes to Two factor authentication. I have the general idea of implementing two factor authentication on a single server. But I was wondering if there is a standard solution for ...
user avatar
  • 111
0 votes
1 answer
3k views

What's the easiest way to integrate Authy (two-factor) authentication with Apache httpd?

EDIT: Something similar to Authy would work too, if that service was i) hosted/SaaS and ii) able to send SMS messages. Most examples advocate RADIUS for two-factor authentication but I'm already ...
user avatar
  • 121
1 vote
0 answers
442 views

OSX two-factor Authentication for ARD and VNC

I am looking at the possibility to add two-factor authentication , using linOTP and Radius, to all network logins ( Servers, Workstations, Switches, etc... ) So far I have been able to set this up for ...
user avatar
  • 11
3 votes
4 answers
6k views

PAM, RADIUS, Google Authenticator and Two Factor Auth

I have setup FreeRADIUS, PAM and the Google Authtenicator. FreeRADIUS calls PAM, which in turn calls the Google pam_google_authenticator.so libary. That all works successfully. However, that's not ...
user avatar
0 votes
1 answer
4k views

Two-Factor Authentication for Zimbra

I have been looking for a Two-Factor Authentication that works well with Zimbra open source edition. One of the products I looked at - eToken PASS(http://www.safenet-inc.com/multi-factor-...
user avatar
25 votes
3 answers
30k views

Trying to get SSH with public key (no password) + google authenticator working on Ubuntu 14.04.1

I'm using Ubuntu 14.04.1 (with OpenSSH 6.6 and libpam-google-authenticator 20130529-2). I'm trying to set up SSH logins where the public key authenticates (without a password) and a user is prompted ...
user avatar
  • 353
1 vote
1 answer
2k views

ssh tunnel through two-factor auth

I need to connect to server using SSH, and the server has two-factor authentication enabled and secretkey disabled. Now, I can connect "manually" form the shell with the help of Google authenticator ...
user avatar
  • 125
2 votes
3 answers
9k views

Boot Windows Azure into Safe Mode

If I only have access to the Azure web interface (eg: no RDP access) is there any way I can boot a windows Azure VM into safe mode AND remotely access it?
user avatar
  • 161
3 votes
2 answers
3k views

freeradius two factor without factor concatenation

I have a cisco router providing an SSL VPN server which is talking to freeradius, which in turn uses pam and two pam modules (sss & yubico) to provide two factor authentication for the VPN. All ...
user avatar
  • 5,427
2 votes
0 answers
759 views

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, ...
user avatar
  • 153
7 votes
1 answer
3k views

Combination of SSH key auth, and two-factor authentication

I was wondering if it is possible to accomplish the following, all at the same time: Disable root logins Enable SSH login for personal user, only via SSH keys Enable SSH login for unprivileged user, ...
user avatar
  • 191
1 vote
1 answer
65 views

SSH listen on 2 ports, With a single config

Im trying to make SSH logins require 2 factor auth but only on one port. So port 1 is open only to a list of ip's managed by iptables. and only requires password / key port 2 is open to all, But ...
user avatar
  • 529
14 votes
2 answers
9k views

Two Factor SSH Authentication on external address only

I have an Ubuntu server with both a private, internal, IP and a public-facing IP. I want to set up two-factor authentication for SSH on just the public side. Is this possible? I was planning on using ...
user avatar
  • 243
3 votes
1 answer
941 views

Implementing a form of port knocking + Phone Factor = 2 Factor auth for RDP?

I have been looking into how to secure a publicly-available RDP endpoint and want to implement our two-factor authentication RADIUS server, PhoneFactor. I would like to implement the following process:...
user avatar
30 votes
7 answers
7k views

SSH: Two Factor Authentication

I currently have a Ubuntu Server 12.04 running OpenSSH along with Samba and a few other services. At the current time I have public key authentication set up, and I'm wondering if it's possible to set ...
user avatar
7 votes
2 answers
8k views

Keeping Private SSH Keys Safe

I have a central server where I stored all the private ssh keys to the different machines that I want to ssh to. Currently, only sysadmins have access to this 'central' server. Given the above ...
user avatar
  • 797
5 votes
5 answers
13k views

looking for opensource 2 factor authentication server [closed]

i'm looking for opensource 2 factor authentication service. (Right now we're using openLDAP.) We're just using Linux Servers. That's why the service should work well with PAM Linux. It would also be ...
user avatar
  • 1,451
3 votes
1 answer
85 views

Is RSA's SecureID anyless secure in light of the attacks exploiting them?

Additionally, is two-factor authentication in general less secure, and if so, why?
user avatar
  • 793
2 votes
1 answer
459 views

PAM example of performing authentication using a custom external script?

I've heard that you can use pam_exec to call an external script, and have that external script perform the actual authentication. Can anyone provide an example of doing this?
user avatar
7 votes
5 answers
7k views

Two Factor Authentication on EC2

I need to host stuff for a financial institution on EC2. The bank wants complete Two Factor Authentication so Stuff like having SSH with a key with password. Something like SecureID or similar would ...
user avatar