Re: add 2FA to ssh

Path	csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From	Toni Mas Soler <antomassol@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: add 2FA to ssh
Date	Thu, 13 Aug 2020 16:30:01 +0200
Message-ID	<ADmoV-6eG-1@gated-at.bofh.it> (permalink)
References	<ADjKp-4zV-1@gated-at.bofh.it>
X-Original-To	debian-user <debian-user@lists.debian.org>
X-Mailbox-Line	From debian-user-request@lists.debian.org Thu Aug 13 14:24:08 2020
Old-Return-Path	<antomassol@gmail.com>
X-Amavis-Spam-Status	No, score=-7.199 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
X-Policyd-Weight	NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .gmail. - helo: .mail-qt1-x82f.google. - helo-domain: .google.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5
Dkim-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :content-transfer-encoding; bh=KL2kbst9G3MSchPTd4men4dvu8P0nIr4VGQMXSYdEEE=; b=bA42gxz2LGqhdt9v3XJYKz4eAQCowM0U9yNHyp3oEUZ0mKM1nKtydqMDNhyq45O66s UMD3WFSU0iRP/Sxl+kL20PjRi3sAIE3D36YKkHrP8Wg69R0vEkBM2HKC12/lfpp1dpkg p5s1vvdI7D/RHjLuC5OfPMt4eU+MvHfgF7cMsNjSLjyI61AT3m4R9pWGCw7GQ85KwiTu UEafAxuTqYZA0KNlTz3eEbGv3yC6jyrNaGRXCVWxA04kryYDry+oPfkh8RqOEWHa8zkg +g5oa+L5komEfUHRArgoWFV83/yPV3BePuTMkpeBedKjPUXlHLyPBp1ou4s7MpX+1sZi yI8g==
X-Google-Dkim-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:content-transfer-encoding; bh=KL2kbst9G3MSchPTd4men4dvu8P0nIr4VGQMXSYdEEE=; b=CbVadvO4bbo8pl9CnIxEl0/omXtj5cZtNGdYqUlG92s7FwBIj8KJMQwLqiPyki4T4M vJXC9Hw/a9nq3sqm48+wfXkPmcjA9w4PK/PaR16FzcOOYpbVJl8PouuZVF68CCbAaT08 7gj5B0krlAK1Lhq4qUOaLpfBLLbnQ2g6F7b4IMQGGYkqbKNCxUtVOi40Iztczbw9AClo 54FN1vYettqsyY0NRlCKftrx0Eyl/wJTGl5i118W7oKtsL6iRroP4fSlvUQdkOizyLc5 T0m/MnTmk53bVqrklaaDO8q0AxqGaSru9qgCpASA66dh+7qrIvK0OuSSw2KGs+owc63k HcZA==
X-Gm-Message-State	AOAM533vS/QOUd+8QHYVRuKa4bAGwSMx7LyD32gsAlgiXNaghTUJTQQH XfeJ12AlXUrEBQ5ST9811vDhTPHB3BSd247gQnO9/g==
X-Google-SMTP-Source	ABdhPJyPQJUQLTz0Nyq/FNfLIZS5ylsw3hpW/+M0/wvsTC7XXol0aJ0zNgKk/+6n6dJ2TF3lmDQP369zb5ImnMEbeBQ=
X-Received	by 2002:ac8:428f:: with SMTP id o15mr5116593qtl.213.1597328632971; Thu, 13 Aug 2020 07:23:52 -0700 (PDT)
MIME-Version	1.0
Content-Type	text/plain; charset="UTF-8"
Content-Transfer-Encoding	quoted-printable
X-Mailing-List	<debian-user@lists.debian.org> archive/latest/766506
List-ID	<debian-user.lists.debian.org>
List-URL	<https://lists.debian.org/debian-user/>
List-Archive	https://lists.debian.org/msgid-search/CAP9PS9YqNx3owE0QWp=jyqN0yKz6uKVj2oW7D-rLNk4ZhkC9Pg@mail.gmail.com
Approved	robomod@news.nic.it
Lines	19
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Thu, 13 Aug 2020 16:23:16 +0200
X-Original-Message-ID	<CAP9PS9YqNx3owE0QWp=jyqN0yKz6uKVj2oW7D-rLNk4ZhkC9Pg@mail.gmail.com>
X-Original-References	<e1290a55-1da9-861e-520e-611e0095a8d5@fuckaround.org>
Xref	csiph.com linux.debian.user:226166

Show key headers only | View raw

I think 2FA first is better. Thus you don't have to type your password
if you have a wrong 2FA.

Toni Mas

Missatge de Pòl Hallen <deben@fuckaround.org> del dia dj., 13 d’ag.
2020 a les 13:38:
>
> Hi folks :)
>
>
> what it better with 2FA: at ssh login request first 2FA authentication
> next ssh password or viceversa?
>
> thanks!
>
> Pol
>

Thread

add 2FA to ssh Pòl Hallen <deben@fuckaround.org> - 2020-08-13 13:40 +0200
  Re: add 2FA to ssh Henning Follmann <hfollmann@itcfollmann.com> - 2020-08-13 13:50 +0200
    Re: add 2FA to ssh Nicholas Geovanis <nickgeovanis@gmail.com> - 2020-08-13 16:50 +0200
      Re: add 2FA to ssh Henning Follmann <hfollmann@itcfollmann.com> - 2020-08-13 17:20 +0200
    Re: add 2FA to ssh Thomas Pircher <thp+debian@p5r.uk> - 2020-08-13 18:40 +0200
      Re: add 2FA to ssh Henning Follmann <hfollmann@itcfollmann.com> - 2020-08-14 14:40 +0200
        Re: add 2FA to ssh Thomas Pircher <thp+debian@p5r.uk> - 2020-08-14 19:20 +0200
  Re: add 2FA to ssh Toni Mas Soler <antomassol@gmail.com> - 2020-08-13 16:30 +0200
    Re: add 2FA to ssh James Allsopp <jamesaallsopp@googlemail.com> - 2020-08-13 16:50 +0200

csiph-web