Questions tagged [two-factor-authentication]
The two-factor-authentication tag has no usage guidance.
50
questions
16
votes
2
answers
1k
views
How can I further secure my system using 2 factor authentication?
The title pretty much says it. I have been hearing more about 2 factor authentication, one-time passwords, hard-tokens, and other improved security features. With the decreasing security of using just ...
user323419
14
votes
4
answers
8k
views
Generating TOTP for 2FA directly from the computer (no mobile device)
On Ubuntu 22.04.2, I would be glad to ear about a native and secure way to generate TOTP codes for using in any given application which needs 2FA.
Do you know an open-source way of doing that directly ...
- 1,330
11
votes
1
answer
16k
views
how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?
How to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator (It can also be setup for non Google accounts)?
- 2,349
7
votes
4
answers
9k
views
Luks two-factor authentication
is it possible to create an encrypted partition with a two-factor authentication ( decryption with password and keyfile ) with LUKS, like in truecrypt?
- 71
6
votes
3
answers
5k
views
Cisco Anyconnect not working on Ubuntu 18.04 with two-factor authentication
I'm trying to get Cisco Anyconnect working on a fresh install of Ubuntu 18.04. The vpn I'm connecting to requires 2fa, using Duo Mobile push or a text code. The program connects fine, and I enter my ...
- 181
6
votes
0
answers
2k
views
Okta Verify 2FA authentication for Ubuntu
Under a new security policy, my company is forcing employees to install Okta Verify on all devices for 2FA authentication. Up until now, I've been happily using Ubuntu and authenticating via the Okta ...
- 61
5
votes
3
answers
13k
views
google authenticator for certain users
After enabling Google authenticator (2 step authentication) on one of my testing servers running ubuntu 16.04 (LTS), I noticed I couldn't login anymore with a user who doesn't have a google ...
- 51
5
votes
1
answer
1k
views
Graphical file manager with support for SSH'ing into duo 2FA protected server?
I used to be able to use nautilus and go to the location bar and "ssh://[email protected]" into a remote server and do things like drag and drop files. However, that remote server added two-factor ...
- 285
3
votes
1
answer
984
views
A two-factor authentication app that runs on Ubuntu?
Most two factor authentication apps are available for Android or iOS. I do not use a smartphone. Is there a two factor authentication app that runs on Ubuntu?
- 13.4k
3
votes
1
answer
168
views
Adding Two Factor Verification to Ubuntu Server SSH login
I have an Ubuntu server that I have physical access to and is currently only accessible via the local area network.
I am considering allowing myself to connect remotely and - whilst I realise a ...
- 1,603
3
votes
2
answers
1k
views
NetworkManager does not support 2FA TOTP for openconnect/AnyConnect VPN
I have been using the NetworkManager with my Unis' VPN for years, and it used to work. Now they introduced multi-factor authentification using TOTP and I can't connect anymore.
I tried to setup the ...
- 31
3
votes
0
answers
1k
views
Authy Desktop client - syncing token labels and icons across devices
Is there a good solution for syncing Authy token labels and icons across devices? Multi Device Sync has made Authy a vast improvement for me over gAuthenticator and dedicated security fobs. On iOS, ...
- 426
3
votes
1
answer
1k
views
2FA with Ubuntu 18.04
I'm using 2FA on Ubuntu 18.04.4 LTS with Google Authenticator. I added auth required pam_google_authenticator.so nullok to /etc/pam.d/common-session and correctly set up Google Authenticator.
The ...
- 89
2
votes
2
answers
2k
views
Happlink Plug-up FIDO U2F Security Key. Why it doesnt work immediately in Ubuntu
Ubuntu 12.04LTS
Happlink Plug-up FIDO U2F Security Key. Why it doesn't work immediately in Ubuntu.
http://sk.happlink.com/plugup/en/
What shall I do with it?
- 29
2
votes
2
answers
2k
views
SSH key-based auth asks for password on first login [duplicate]
I have a fresh Ubuntu 16.04.1 LTS system and have noticed that key-based SSH authentication asks for the account's password the first time I login to the machine and subsequent SSH attempts work ...
- 401
2
votes
1
answer
875
views
Apparmor enforce mode prevents Firefox from reading U2F security key
When the default apparmor profile for Firefox is set to enforce mode, it blocks access to security keys. Disabling the profile restores access.
Rules that I've tried and failed:
/sys/devices/** r,
#...
- 123
2
votes
1
answer
901
views
Can't access server, 2FA rejecting verification codes and back-up codes don't work
I have just configured the google-authenticator 2FA for a server I have and am now unable to sign in as the connections are being rejected by.
I get the following message:
Received disconnect from ...
- 21
2
votes
1
answer
1k
views
Google 2-way & XRDP?
I installed the 2-Way login like in this manual:
how to setup two factor authentication in Ubuntu for Ubuntu users using Google authenticator?
So now I'm trying to get it working with XRDP.
I ...
- 21
1
vote
1
answer
4k
views
Cannot login with two-factor SSH [duplicate]
In response to the users that flagged this as a potential duplicate, it is not. I have a SSH hardening solution, which I got off Canonical's ubuntu tutorials and is commonly repeated, but it isn't ...
- 21
1
vote
0
answers
122
views
Google Authenticator not giving correct verification code
I'm setting up a google authenticator for a linux image that i'm creating. Every time it gives me a verification code it's different to what my phone gives me.
My question is because this is time ...
1
vote
0
answers
829
views
Seems 2FA login authentication is trivial to bypass on Ubuntu. What am I missing?
I was considering setting up 2FA on Ubuntu with libpam-google-authenticator as outlined in this article. However, it seems this method can be completely bypassed by entering GRUB rescue mode and ...
- 179
1
vote
1
answer
1k
views
SSH using Google auth TOTP and pubkey still Requiring password
I'm using Google Auth setup by following this guide on linode.com and a pubkey (generated with ssh-keygen -t rsa -b 4096) to ssh into a new Ubuntu server I have setup.
└─$ ssh -i .ssh/ubuntuServer ...
1
vote
0
answers
375
views
Password does not work after setting up google-Authenticator 2fa
Hi I have a server at home that I often connect to from my school but I wanted to give it an extra security boost. I followed this tutorial, https://ubuntu.com/tutorials/configure-ssh-2fa#1-overview, ...
1
vote
0
answers
3k
views
Passwordless Login to Ubunto 20.04 with FIDO2
So i've setup passwordless thru FIDO2 by adding
auth sufficient pam_u2f.so authfile=/home/me/.config/FIDO2/u2f_keys
having followed the instructions on the yubico page to generate the u2f_keys code
It'...
- 11
1
vote
2
answers
3k
views
Need help on google authenticator on ubuntu
I have Ubuntu 20.04.3 LTS where I have successfully installed Google authenticator for MFA authentication, now I need a help on the steps of authentication, my goal is this:
If a user has no ssh-key ...
- 11
1
vote
0
answers
226
views
SSH Challenge response in Thunar or Nautilus? [closed]
So I have a project where I need to access a server with SSH that has both priv/pub key and 2FA challenge response verification enabled.
The following works:
Command Line SSH access
Using WinSCP in ...
- 549
1
vote
0
answers
297
views
SSH won't ask me for password AND then 2FA OTP (QR)
I've being trying to set up my first ever (minimal?) Ubuntu 20 VPS and I have reached a learning point where I can secure and tune control for other users. I have being trying so far to setup 2FA from ...
- 11
1
vote
1
answer
108
views
use github with yubikey without phone
I am using Xubuntu 18.04 and wonder if there is a way to use Two-factor authentication with github but without a phone. Currently I need to enter the verification number that is shown on my phone/nfc/...
- 315
1
vote
0
answers
566
views
Can remmina work with authenticator apps?
Set up my Ubuntu 18.04 droplet to use google-authenticator for ssh logins. It works well, but I can't see how to configure remmina to work with the authenticator. It prompts for a password instead and ...
- 23.9k
1
vote
0
answers
687
views
Ubuntu One 2FA lost device removal
I lost access to my Google Authenticator app and my backups aren't working...lesson learned. Now I need to remove the 2FA device from my Ubuntu One account but of course you have to have the device ...
- 1,816
1
vote
0
answers
37
views
Ubuntu google authenticator only for ssh not physical machine [duplicate]
I set up google authenticator for ssh login, and it works fine.
However, when restart the computer and login form the physical machine, it requires the google autheticator code also - is it possible ...
- 193
1
vote
0
answers
41
views
Two user authentication to use command
This might seem weird but I'm trying to find a way to have a double authentication requirement for the use of certain specific command on my server. For example, rebooting the machine would require ...
1
vote
1
answer
2k
views
Avoid verification code request when using sudo using Google authenticator
I've just activated the two factor authentication using Google authenticator and I'm now required to provide the verification code any time that I use sudo. How to avoid the authentication step when ...
- 223
1
vote
1
answer
631
views
Still being Prompt for Password After enabling Public Keys
When I added my public key into my .ssh/user/authorized_keys file and I saved and restarted my server it gave me this error:
initctl: Unable to connect to system bus: Failed to connect to socket /var/...
- 143
0
votes
2
answers
388
views
How to require 2FA for local Ubuntu login?
There are directions on configuring 2FA for SSH. However, I'm interested in mandating 2FA for logal sign in. For example, normally, the login might look like this:
ubuntu login: cocomac
Password:
...
- 3,534
0
votes
1
answer
1k
views
How to enable Yubikey 2FA using pam_u2f, for gnome desktop privilege elevation?
Yubico's own docs do a pretty great job of documenting the process for enabling 2FA for pretty much every privilege escalation scenario (sudo from a terminal, gdm login, etc.):
https://support.yubico....
- 171
0
votes
0
answers
307
views
Trying to configure SSH server to use Google Authenticator 2FA on 22.04.3 Ubuntu Server
I followed this guide here https://www.techrepublic.com/article/enable-ssh-2fa-ubuntu-server/ to configure the first part after setting up Google Authenticator on the system. I couldn't log into my ...
0
votes
0
answers
119
views
Deactivation of the possibility to deactivate 2FA via rescue mode (linux) - 2FA PAM module it doesn't make sense
I got interested in 2FA to log in for linux os ( PAM google authentificator)
The problem is that from the rescue boot level it can be easily disabled which means that if someone has physical access to ...
- 1
0
votes
0
answers
238
views
Permission denied after two factor authentification activation
I followed instruction on this tutorial to get two factor authentification on ssh.
But since, I've done it, I get a permission denied when I try to connect using the usual user.
I'm using Ubuntu ...
0
votes
0
answers
47
views
WEBDAV Securit - 2FA ubuntu server
at the moment I'm creating a server based on WEBDAV and I have a question:
Is it possible to add 2FA to my network map drive or some other type of additional intrusion prevention?
Apart from the ...
0
votes
2
answers
1k
views
Ubuntu Problems with Pam Google Auth
I had a working OpenVPN server that used Google Authenticator for TFA. It was working perfectly fine for well over a year. Just last night/today it stopped working. I managed to track down the auth....
- 101
0
votes
0
answers
4k
views
SSH login does not work after enabling 2-factor. Getting failed to read ".google_authenticator"
I have a server running Ubuntu 20.04 and I wanted to try to set up 2 factor authentication to secure SSH logins.
I logged in to my server, and followed this tutorial: https://www.rosehosting.com/blog/...
- 461
0
votes
0
answers
599
views
Remove DUO auth completely from ubuntu server 18.04 - two factor auth
I have an Ubuntu 18.04 server with DUO authentication. This DUO interferes with my capistrano deployment (rails app)
For such, I have removed duo auth with sudo apt-get remove duo-unix
Then I logged ...
- 31
0
votes
2
answers
638
views
How to provide two-factor authentication in Kubuntu without a phone
Is it possible to use two-factor authentication on a Linux laptop running Kubuntu 18.04 without using a phone at all? If so, how?
I'm able to authenticate on my phone without any particular ...
- 2,141
0
votes
1
answer
226
views
How to disable FIDO authenticator?
Whenever I run the command ssh-add -K ~/.ssh/id_rsa, I get a prompt asking for the FIDO authenticator pin.
How do I disable the FIDO authenticator?
- 105
0
votes
2
answers
637
views
Why does this users does not need PAM two factor Authentication for logging in?
I inherited a system from a departed colleague. He setup two factor authentication on the system, except for user root and ftpupload.
However, there is this particular user who has SSH access but does ...
- 101
0
votes
0
answers
79
views
Multi-factor Voice Authentication
Was wondering if one could set up Multi-factor Voice Authentication along with traditional OTP based 2FA for logging in to their GNU/Linux, and superuser escalations. There are some posts from about a ...
- 187
0
votes
0
answers
118
views
Is it possible to login from a cell phone
I want to login to UI from another device. Google authentication satisfies me but it does not work perfectly. I would like to work it as the finger login works. I am working on HP and I have problems ...
- 101
0
votes
0
answers
111
views
Avoid providing verification code request for specific time using Google authenticator
I've just activated the two factor authentication using Google authenticator and I'm now required to provide the verification code any time that I'm logging to the system. How to avoid the ...
- 1
-1
votes
1
answer
1k
views
Does Ubuntu really not support Google 2-factor authentication?
I have spent the best part of a day trying to get Ubuntu 17.04 to work happily with Google 2-factor authentication. I found that with 2FA turned on in my Google account settings I could add the ...
