Re: add 2FA to ssh

From	James Allsopp <jamesaallsopp@googlemail.com>
Newsgroups	linux.debian.user
Subject	Re: add 2FA to ssh
Date	2020-08-13 16:50 +0200
Message-ID	<ADmIh-6lf-3@gated-at.bofh.it> (permalink)
References	<ADjKp-4zV-1@gated-at.bofh.it> <ADmoV-6eG-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Hi,
You can do it at the same time with a yubikey and editing your pam file.

https://developers.yubico.com/yubico-pam/YubiKey_and_SSH_via_PAM.html#:~:text=The%20Yubico%20PAM%20module%20for,YubiKey%20assigned%20to%20the%20user.

Been doing this for years,
James

On Thu, 13 Aug 2020 at 15:24, Toni Mas Soler <antomassol@gmail.com> wrote:

> I think 2FA first is better. Thus you don't have to type your password
> if you have a wrong 2FA.
>
> Toni Mas
>
> Missatge de Pòl Hallen <deben@fuckaround.org> del dia dj., 13 d’ag.
> 2020 a les 13:38:
> >
> > Hi folks :)
> >
> >
> > what it better with 2FA: at ssh login request first 2FA authentication
> > next ssh password or viceversa?
> >
> > thanks!
> >
> > Pol
> >
>
>

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

add 2FA to ssh Pòl Hallen <deben@fuckaround.org> - 2020-08-13 13:40 +0200
  Re: add 2FA to ssh Henning Follmann <hfollmann@itcfollmann.com> - 2020-08-13 13:50 +0200
    Re: add 2FA to ssh Nicholas Geovanis <nickgeovanis@gmail.com> - 2020-08-13 16:50 +0200
      Re: add 2FA to ssh Henning Follmann <hfollmann@itcfollmann.com> - 2020-08-13 17:20 +0200
    Re: add 2FA to ssh Thomas Pircher <thp+debian@p5r.uk> - 2020-08-13 18:40 +0200
      Re: add 2FA to ssh Henning Follmann <hfollmann@itcfollmann.com> - 2020-08-14 14:40 +0200
        Re: add 2FA to ssh Thomas Pircher <thp+debian@p5r.uk> - 2020-08-14 19:20 +0200
  Re: add 2FA to ssh Toni Mas Soler <antomassol@gmail.com> - 2020-08-13 16:30 +0200
    Re: add 2FA to ssh James Allsopp <jamesaallsopp@googlemail.com> - 2020-08-13 16:50 +0200

csiph-web