2FA over ssh

Suggestions for features and software you would like to see in DietPi, goes here.
Post Reply
cocoflan
Posts: 49
Joined: Sat Dec 01, 2018 6:33 pm

2FA over ssh

Post by cocoflan »

Tested it and works well with the non standard ssh server (dropbear) so openssh server i used. i guess great to make use of!!


https://www.comparitech.com/blog/inform ... ssh-login/

Only i can not get xwin software run from terminal.

User avatar
WarHawk
Posts: 555
Joined: Thu Jul 20, 2017 7:55 am

Re: 2FA over ssh

Post by WarHawk »

Interesting...thanks

Joulinar
Posts: 130
Joined: Fri Nov 15, 2019 11:49 pm

Re: 2FA over ssh

Post by Joulinar »

Yep indeed it's working fine with openssh. I guess on dropbear some other files would need to be adjusted to enable google authenticator

cocoflan
Posts: 49
Joined: Sat Dec 01, 2018 6:33 pm

Re: 2FA over ssh

Post by cocoflan »

contacted the developers of dropbear, this is what they say about 2FA:


Sorry, there isn't any way to do 2fa, unless you have some PAM module that expects "password-2FApart" combined into one password response.

Cheers,

Joulinar
Posts: 130
Joined: Fri Nov 15, 2019 11:49 pm

Re: 2FA over ssh

Post by Joulinar »

Thx for checking. Looks it will not be possible with dropbear, unless they will will support the required PAM modules.

Joulinar
Posts: 130
Joined: Fri Nov 15, 2019 11:49 pm

Re: 2FA over ssh

Post by Joulinar »

One thing in addition guys. I checked 2FA together with OpenSSH SFTP. Used WinSCP as Client and YES it was working as well. So a pretty cool thing 8)

Post Reply