On Wed, Mar 19, 2025 at 12:26 PM George N. White III <gnw...@gmail.com> wrote:
>
> On Tue, Mar 18, 2025 at 11:15 AM ToddAndMargo via users
> <users@lists.fedoraproject.org> wrote:
> >
> > Hi All,
> >
> > Is there an RDP server that runs on Fedora and that
> > has multi-factor authentication?  And that runs well.
>
> You should be able to tunnel RDP over ssh and configure ssh to use
> 2-factor authentication:
> <https://idroot.us/ssh-two-factor-authentication-fedora-41/> or (less 
> verbose):
> <https://ubuntu.com/tutorials/configure-ssh-2fa#2-installing-and-configuring-required-packages>
>
> I haven't tried this myself.   Fedora provides:
>
> google-authenticator.x86_64: One-time pass-code support using open standards

Possibly related (or possibly an off-topic rabbit hole)... Fedora also
provides YubiKey support:

$ dnf search yubikey
...
Matched fields: name, summary
 libyubikey.i686: C library for decrypting and parsing Yubikey
One-time passwords
 libyubikey.x86_64: C library for decrypting and parsing Yubikey
One-time passwords
 libyubikey-devel.i686: Development files for libyubikey
 libyubikey-devel.x86_64: Development files for libyubikey
...

I especially like YubiKeys. Especially the current ones because they
provide public/private key crypto, and implement the FIDO2 and
WebAuthn protocols. The original ones implement the shared-secret
OTP's like HOTP and TOTP, using the original FIDO protocol.

Jeff
-- 
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to