[Cialug] two factor ssh auth

[Barry Von Ahsen]

On 9/21/2011 3:17 PM, Barry Von Ahsen wrote:
> On 9/21/2011 2:48 PM, Don Ellis wrote:
>> On Tue, Sep 20, 2011 at 12:50 PM, Barry Von Ahsen<barry at vonahsen.com>
>> wrote:
>>> is anyone doing two factor ssh auth? I started looking at ssh key + pass
>>> and found monkeysphere[1], I also found wikid[2], freeradius and
>>> duo_unix[3].
>>>
>>> any suggestions or gotchas? free or low cost is best. also,
>>> unfortunately,
>>> end users are all windows based
>>>
>>>
>>> -barry
>>>
>>> [1] http://web.monkeysphere.info/why/#index2h2
>>> [2] http://www.wikidsystems.com/
>>> [3]
>>> http://blog.duosecurity.com/2011/04/announcing-duos-two-factor-authentication-for-unix/
>>>
>>
>> One of my LUG buddies here in St Louis (MO) really likes YubiKey with
>> LastPass. Physical token is really inexpensive and simple.
>
> nice, that looks awesome

even better, EPEL has pam_yubico packaged for RHEL/centos

-barry