100 Linux Tutorials: How to setup totp-cgi with pam_url for 2-factor sudo

preview_player
Показать описание
How to get a basic totp-cgi and pam_url system up and running to do 2-factor authentication with sudo. The concepts discussed are useful groundwork for extending 2-factor authentication deeper into your network.

Git repos for totp-cgi and pam_url are available here:
Рекомендации по теме
Комментарии
Автор

So I did this today. Lots of work by Konstantin Ryabitsev and others (myself included) has gone into making totp-cgi & pam_url work cleanly. I'm happy to show off a "quick" setup :)

AndrewGrimberg
Автор

Nice tutorial. I wish it explains the SSL part that is needed for pam_url. It is essential in fact, and there is no documentation about it... :(

dlekic
visit shbcf.ru