search

Geal / PilotSSH-scripts

A collection of scripts usable with the PilotSSH iOS app
http://pilotssh.com
MIT License
52 stars 14 forks source link

Two Factor Authentication #30

Open fjrichman opened 10 years ago

fjrichman commented 10 years ago

I've recently setup my server with Authy 2FA to further protect my server from people trying to get in. Is there any chance that PilotSSH could be updated with support for various 2FA systems?

A few ones I can think of: Authy - authy.com Yubikey - yubico.com Google Authenticator

fjrichman commented 10 years ago

Specifically I'm getting Error. 4 Received message is too long: (variable digits here)

Geal commented 10 years ago

This is an interesting feature. The interaction between SSH command exec and ForceCommand usage could be problematic, since it is not interactive.

Is ForceCommand the only way to check for the OTP? Are there other authentication methods?

fjrichman commented 10 years ago

I believe Yubikey and Google Auth both actually use a PAM module. Which as far as I can tell won't natively function when using public key auth. (There are from my understanding work arounds for this)

Authy only has the script officially. I don't know of any other ways to authenticate before shell though.