Re: [lopsa-tech] Two-Factor Approaches

2015-05-21 Thread Iain Morris
I've used Google Authenticator for a number of things now. Once you have the pam module integrated into a freeradius config the sky's the limit with what you can use it for. I've used it for authenticating pulse ssl vpn clients combined with an AD auth challenge and it works great. On Thu, May 2

Re: [lopsa-tech] Two-Factor Approaches

2015-05-21 Thread N.J. Thomas
* Ray Van Dolson [2015-05-20 22:55:41-0700]: > Yubikey or Yubikey+AuthLite are nice solutions for machine logins. > What other approaches are some of you using? Google Authenticator works well for this task: https://github.com/google/google-authenticator/ Some nice things about it: - t

[lopsa-tech] Two-Factor Approaches

2015-05-20 Thread Ray Van Dolson
Yubikey or Yubikey+AuthLite are nice solutions for machine logins. What other approaches are some of you using? Am considering some use cases which are becoming more common: - OSX user running a Windows VM (needing to authenticate from both). - "Integration" with SAML-style two-factor (things lik