Re: non-hardware 2fa options for openssh

2023-08-29 Thread Stuart Henderson
On 2023-08-29, myml...@gmx.com wrote: > My question is there any recent documentation / information on setting > up an openssh server with non-hardware based two factor authentication?  > This does NOT have to be google authenticator, any similar service will > suffice. if an ssh key is good enou

Re: non-hardware 2fa options for openssh

2023-08-29 Thread Stuart Henderson
On 2023-08-29, Daniel Jakots wrote: > You can also want to look at sysutils/login_oath (which I've been using > for years), but maybe for new setups, the login_totp from base makes > more sense. you might be thinking of login_yubikey which is in base, but it has no way to sync the counter between

Re: non-hardware 2fa options for openssh

2023-08-29 Thread Daniel Jakots
On Tue, 29 Aug 2023 13:18:53 -0400, Dave Voutila wrote: > > You can also want to look at sysutils/login_oath (which I've been > > using for years), but maybe for new setups, the login_totp from > > base makes more sense. > > > > login_totp is in base? Wow, I was sure https://github.com/reyk/l

Re: non-hardware 2fa options for openssh

2023-08-29 Thread Dave Voutila
Daniel Jakots writes: > On Tue, 29 Aug 2023 10:07:18 -0500, "myml...@gmx.com" > wrote: > >> Hi All, >> >> I want to secure an openssh server with two factor authentication and >> have seen the hardware token methods, most recently i've been seeing >> yubi/FIDO methods. >> >> Ideally I would li

Re: non-hardware 2fa options for openssh

2023-08-29 Thread Daniel Jakots
On Tue, 29 Aug 2023 10:07:18 -0500, "myml...@gmx.com" wrote: > Hi All, > > I want to secure an openssh server with two factor authentication and > have seen the hardware token methods, most recently i've been seeing > yubi/FIDO methods. > > Ideally I would like to avoid having to depend on a us

non-hardware 2fa options for openssh

2023-08-29 Thread myml...@gmx.com
Hi All, I want to secure an openssh server with two factor authentication and have seen the hardware token methods, most recently i've been seeing yubi/FIDO methods. Ideally I would like to avoid having to depend on a usb size device that could easily be lost. I looked around and found mention