sankage

Simple Two-Factor SSH Authentication

Posted on September 23 2011 by Richard Taylor (@moomerman)

In a two-part post I'm going to show you some tricks you can do with SSH logins. This post covers setting up two-factor SSH authentication with the Google Authenticator app.

I was recently getting some servers in shape so I can pass the Payment Card Industry standards questionnaire and one requirement was two-factor authentication access to the server. I queried whether SSH key + passphrase was acceptable but didn't get a clear answer so I figured I'd explore setting up another authentication factor myself, plus it piqued my interest.

After a bit of research I found it was possible using a PAM module but it doesn't work along with SSH key authentication (only password authentication) and I only use SSH key logins for my servers.

The magic

sankage

# Respondent model

class Respondent < ActiveRecord::Base
  belongs_to :office
  has_many :comments
  has_many :answers
end

sankage

# Answer model

class Answer < ActiveRecord::Base
  belongs_to :respondent
  belongs_to :question
end

sankage

class Answer < ActiveRecord::Base
  belongs_to :respondent
  belongs_to :question
end

sankage

# Is there a coffeescript way of doing this?

(function($, exports){
  # doing random stuff here
})(jQuery, window);

# Other than this:

( ($, exports) ->
  # doing random stuff here

sankage

class Prime
  constructor: (@prime = 2) ->
    @history = [@prime]

  isPrime: (num) ->
    result = true
    if num isnt 2
      if num % 2 is 0
        result = false
      else

sankage

javascript:(function(){var div,filler,link,names,video,videos,_i,_j,_len,_ref,__slice=[].slice,__indexOf=[].indexOf||function(a){for(var b=0,c=this.length;c>b;b++)if(b in this&&this[b]===a)return b;return-1};if(localStorage&&localStorage.getItem("watched_videos"))for(div='<div class="course-progress" data-width="100%" style="width: 100%;z-index: 0;"></div>',names=localStorage.getItem("watched_videos").split("|"),videos=$(".bucket-media"),_i=0,_len=videos.length;_len>_i;_i++)video=videos[_i],_ref=video.href.split("/"),filler=_ref.length>=2?__slice.call(_ref,0,_j=_ref.length-1):(_j=0,[]),link=_ref[_j++],__indexOf.call(names,link)>=0&&$(video).before(div)})();

sankage

$ bundle exec rspec spec/features/deleting_leagues_spec.rb

~/.rbenv/versions/1.9.3-p374/lib/ruby/gems/1.9.1/gems/better_errors-0.3.2/lib/better_errors/core_ext/exception.rb:9: [BUG] Segmentation fault
ruby 1.9.3p374 (2013-01-15 revision 38858) [x86_64-darwin12.2.1]

-- Control frame information -----------------------------------------------
c:0061 p:---- s:0168 b:0168 l:000167 d:000167 CFUNC  :callers
c:0060 p:0072 s:0165 b:0165 l:001870 d:0015a0 LAMBDA ~/.rbenv/versions/1.9.3-p374/lib/ruby/gems/1.9.1/gems/better_errors-0.3.2/lib/better_errors/core_ext/exception.rb:
c:0059 p:---- s:0162 b:0162 l:000161 d:000161 FINISH
c:0058 p:---- s:0160 b:0160 l:000159 d:000159 CFUNC  :new

sankage

➜ bundle install
Fetching gem metadata from https://rubygems.org/.......
Fetching gem metadata from https://rubygems.org/..
Resolving dependencies...
Using rake (10.0.4) 
Installing RedCloth (4.2.9) 
Using i18n (0.6.1) 
Using multi_json (1.7.3) 
Using activesupport (3.2.13) 
Using addressable (2.3.4) 

sankage

$ bundle install --path vendor/gems --binstubs
Fetching source index from https://rubygems.org/
Using rake (10.0.3) 
Using i18n (0.6.2) 
Using multi_json (1.6.1) 
Using activesupport (3.2.12) 
Using builder (3.0.4) 
Using activemodel (3.2.12) 
Using erubis (2.7.0) 
Using journey (1.0.4)