Questions tagged [two-factor]

30 questions
2
votes
1 answer

How to Configure Roundcube/Dovecot for *Effective* 2-Factor Authentication

There are several Roundcube plugins that provide two-factor authentication. However, the issue I now see is that I can still simply log in via IMAP/SMTP, without 2-FA (obviously). 2-FA is (effectively) useless here. I thought I could solve this…
2
votes
0 answers

PAM Google Authenticator With SFTP And Other Apps

I'm attempting to set up a situation where SSH Authorized Key + Google Authenticator Code is sufficient to ssh into the server. This is working fine for normal SSH terminal operations - I'm prompted for a verification code, which I can enter, and be…
Ben
  • 21
  • 2
2
votes
3 answers

Boot Windows Azure into Safe Mode

If I only have access to the Azure web interface (eg: no RDP access) is there any way I can boot a windows Azure VM into safe mode AND remotely access it?
John
  • 161
  • 1
  • 5
2
votes
0 answers

How to add two-factor authetntication to ssh?

I am trying to add 2FA to sshd using PAM from oathtool package. I want two ways to login to server: publickey and 2FA, or password and 2FA So far I managed to add 2FA to publickey authentication, but don't know how to join password with 2FA. My…
mefju
  • 153
  • 5
2
votes
1 answer

PAM example of performing authentication using a custom external script?

I've heard that you can use pam_exec to call an external script, and have that external script perform the actual authentication. Can anyone provide an example of doing this?
Keith Palmer Jr.
  • 1,151
  • 4
  • 16
  • 28
1
vote
2 answers

Two factor SSH authentication on multiple servers

I am a newbie when it comes to Two factor authentication. I have the general idea of implementing two factor authentication on a single server. But I was wondering if there is a standard solution for implementing it on multiple servers. SCENARIO:…
MaK
  • 111
  • 2
1
vote
0 answers

OSX two-factor Authentication for ARD and VNC

I am looking at the possibility to add two-factor authentication , using linOTP and Radius, to all network logins ( Servers, Workstations, Switches, etc... ) So far I have been able to set this up for Linux, Windows,Switches, VPN, etc... However, I…
Koendb
  • 11
  • 2
1
vote
1 answer

ssh tunnel through two-factor auth

I need to connect to server using SSH, and the server has two-factor authentication enabled and secretkey disabled. Now, I can connect "manually" form the shell with the help of Google authenticator app. Problem is that many of the tools that I…
frnhr
  • 125
  • 7
1
vote
1 answer

SSH listen on 2 ports, With a single config

Im trying to make SSH logins require 2 factor auth but only on one port. So port 1 is open only to a list of ip's managed by iptables. and only requires password / key port 2 is open to all, But requires 2 factor auth. Is this setup possible or…
exussum
  • 529
  • 3
  • 8
1
vote
1 answer

Security of a hardware token vs software token for two-factor authentication

Surprisingly I don't see this question on ServerFault already. I'm wondering about the pros and cons of hardware token vs software token for two-factor authentication - only in the context of security, not convenience. I am referring only to the…
ScottStonehouse
  • 979
  • 4
  • 16
  • 25
0
votes
0 answers

Is the configuration I want possible? Problems with SSH to Redhat server using google authentication 2fa

I'm attempting to configure two factor authentication when using SSH to connect to my redhat ec2 instance. I would like to configure it like this: If user has both ssh key and google auth set up, use these two factors If user has no ssh key, use…
Jquinn
  • 1
0
votes
2 answers

Implementing 2 -Factor Authentication

My company access a Third-party website, that uses a simple username + password authentication method. This vendor could restrict the application access (website) to a defined ip range. We are trying to implement 2-Factor Authentication to protect…
0
votes
1 answer

What's the easiest way to integrate Authy (two-factor) authentication with Apache httpd?

EDIT: Something similar to Authy would work too, if that service was i) hosted/SaaS and ii) able to send SMS messages. Most examples advocate RADIUS for two-factor authentication but I'm already using OpenLDAP for centralized authentication and…
Patrick
  • 121
  • 1
  • 6
0
votes
1 answer

Two-Factor Authentication for Zimbra

I have been looking for a Two-Factor Authentication that works well with Zimbra open source edition. One of the products I looked at - eToken…
Debianuser
  • 421
  • 4
  • 10
  • 29
-2
votes
1 answer

Does iphone Touch ID count as 2FA?

Yes it does because The customer has the physical iPhone The customer 'is' the owner of the fingerprint But no it doesn't because 1=>2 : If you steal the customer's iphone, the fingerprint is now something you can get. The UK Financial Conduct…
1
2