FreeRadis 2FA - 2 Factor Authentication
Hello! I want to know if are there a free tool that do 2FA integration between google authenticator app or authy app and freeradius ? Thank you very much in advance. - - - Fernando
Last time I looked at google authenticator is was OAUTH-only so the only way to do it was run a cleartext protocol, steal the user's password, and then pretend to be a web browser. Maybe things have changed since. Authy had this but it is obsolete: https://github.com/twilio/authy-freeradius They've replaced their authy API with the new "verify" API. It's a REST API so there is no insane poorly coded RADIUS relay agent involved as with some other services, but as far as I can google they are not providing pre-worked FreeRADIUS modules or scripts anymore. ________________________________________ From: Freeradius-Users <freeradius-users-bounces+bjulin=clarku.edu@lists.freeradius.org> on behalf of Fernando Patzlaff <patzlaff@gmail.com> Sent: Friday, May 7, 2021 1:17 PM To: freeradius-users@lists.freeradius.org Subject: [EXT] FreeRadis 2FA - 2 Factor Authentication Hello! I want to know if are there a free tool that do 2FA integration between google authenticator app or authy app and freeradius ? Thank you very much in advance. - - - Fernando - List info/subscribe/unsubscribe? See https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=04%7C01%7Cbjulin%40clarku.edu%7Ca34b1ae13d494602790808d9117c1346%7Cb5b2263d68aa453eb972aa1421410f80%7C0%7C1%7C637560046867755983%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=IyuIiv5phQPsO3VscCjxLRz9Qy8mEHqWomiG8uEm4LM%3D&reserved=0
On May 7, 2021, at 1:17 PM, Fernando Patzlaff <patzlaff@gmail.com> wrote:
I want to know if are there a free tool that do 2FA integration between google authenticator app or authy app and freeradius ?
What exactly does this mean? If you're trying to check the Google Authenticator codes against Google, then that's complex. It depends on Google, and you'd need to read Googles documentation to see what they need. If you're trying to have FreeRADIUS do the checking itself, that's a bit easier. Unfortunately there's no "built-in" way to check it, but there are tools available: https://github.com/j256/perl-two-factor-auth/blob/master/totp.pl There's also pam_google_authenticator: https://github.com/google/google-authenticator-libpam/blob/master/man/pam_go... Alan DeKok.
On May 9, 2021, at 8:15 AM, Alan DeKok <aland@deployingradius.com> wrote:
If you're trying to have FreeRADIUS do the checking itself, that's a bit easier. Unfortunately there's no "built-in" way to check it,
I've just pushed rlm_totp to v3. It will be in 3.0.22 when that's released. Alan DeKok.
participants (3)
-
Alan DeKok -
Brian Julin -
Fernando Patzlaff