Two Factor Authentication
-
Would it be possible to integrate an open source version of 2 factor authentication into PFsense's web and SSH logins?
https://code.google.com/p/google-authenticator/
It would be greatly enhance the security of the distribution and set it apart from competing distributions.
-
Just want to add another open source tool:
-
Just want to add another open source tool:
Thanks for adding that. That was the exact tool I had in mind but could not think of the name, and it didn't come up on the first few pages of Google either when I searched.
MOTP would be better then Google Authenticator.
-
I would also like a optional reCAPTCHA login to the web interface as well.
-
Bump. This feature is important.
-
If it's important, raise a bounty in the bounty forum ;)
-
I was able to get google-authenticator working in Pfsense 2.0 with SSH using this tutorial as a guideline:
http://www.mywushublog.com/2011/07/cheap-two-factor-authentication-with-google/
In order to compile the code, I stood up a Freebsd 8.2 virtual system. After the binaries worked for the virtual system, I copied the files over to PFsense.As for the web server, i think pfsense is using lighttpd. Not sure how close that is to Apache, but there is a google authenticator apache module for use with apache web servers. I've not tested it.
http://code.google.com/p/google-authenticator-apache-module/I'd be interested it seeing it all work in pfsense though.