multi factor authentication for ssh - #1037

Open

theCalcaholic wants to merge 25 commits into

nextcloud:develfrom

theCalcaholic:feature/multi-factor-ssh

Commits on Jan 21, 2020

Add ncp app for setting up multi factor authentication for ssh
theCalcaholic
committed
Properly restore default pam configuration if totp was not enabled.
theCalcaholic
committed
Add configuration for multi factor authentication app
theCalcaholic
committed
Add cleanup() function to multi-factor-authentication.sh
theCalcaholic
committed
multi-factor-authentication: use apt in non-interactive mode
theCalcaholic
committed
multi-factor-authentication: Simplify is-active function
theCalcaholic
committed
multi-factor-authentication: Use jq in 'raw' mode (to avoid additional quotes)
theCalcaholic
committed
multi-factor-authentication: Implement public key setup
theCalcaholic
committed
multi-factor-authentication: Fix improper check whether or not SSH user was retrieved correctly.
theCalcaholic
committed
Implement escaping of spaces in ncp-app parameters
theCalcaholic
committed
multi-factor-authentication: Prevent enabling of totp+pw and other password reliant methods (not possible due to limitations of sshd configuration)
theCalcaholic
committed
multi-factor-authentication: Only enable the "UsePAM" setting, if totp is enabled
theCalcaholic
committed
multi-factor-authentication: Remove obsolete "ACTIVE" parameter
theCalcaholic
committed
multi-factor-authentication: Improve description
theCalcaholic
committed
multi-factor-authentication: Remove existing authorized ssh pubkeys if none was given
theCalcaholic
committed
multi-factor-authentication: Ensure we have permissions to delete google authenticator configuration when resetting it
theCalcaholic
committed
Use <pre> tags and UTF8 mode to show qr code in browser

Tobias Knöppler
authored and
theCalcaholic
committed
Revert "Use <pre> tags and UTF8 mode to show qr code in browser"

Tobias Knöppler
authored and
theCalcaholic
committed
multi-factor-authentication.sh: Remove mention of qr code since it is not working

Tobias Knöppler
authored and
theCalcaholic
committed
multi-factor-authentication.cfg: Fix typos and improve concision.

Tobias Knöppler
authored and
theCalcaholic
committed
multi-factor-authentication.*: Provide 5 fields for SSH pub keys
theCalcaholic
committed
library.sh: Support parameters with 'allow_unsafe'
theCalcaholic
committed
multi-factor-authentication.sh: Remove debug output
theCalcaholic
committed
multi-factor-authentication.sh: Fix typo in variable name
theCalcaholic
committed

Commits on Jan 22, 2020

Merge branch 'devel' into feature/multi-factor-ssh
theCalcaholic
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

multi factor authentication for ssh - #1037

multi factor authentication for ssh#1037
theCalcaholic wants to merge 25 commits into
nextcloud:develfrom
theCalcaholic:feature/multi-factor-ssh

Commits on Jan 21, 2020

Add ncp app for setting up multi factor authentication for ssh

Properly restore default pam configuration if totp was not enabled.

Add configuration for multi factor authentication app

Add cleanup() function to multi-factor-authentication.sh

multi-factor-authentication: use apt in non-interactive mode

multi-factor-authentication: Simplify is-active function

multi-factor-authentication: Use jq in 'raw' mode (to avoid additional quotes)

multi-factor-authentication: Implement public key setup

multi-factor-authentication: Fix improper check whether or not SSH user was retrieved correctly.

Implement escaping of spaces in ncp-app parameters

multi-factor-authentication: Prevent enabling of totp+pw and other password reliant methods (not possible due to limitations of sshd configuration)

multi-factor-authentication: Only enable the "UsePAM" setting, if totp is enabled

multi-factor-authentication: Remove obsolete "ACTIVE" parameter

multi-factor-authentication: Improve description

multi-factor-authentication: Remove existing authorized ssh pubkeys if none was given

multi-factor-authentication: Ensure we have permissions to delete google authenticator configuration when resetting it

Use <pre> tags and UTF8 mode to show qr code in browser

Revert "Use <pre> tags and UTF8 mode to show qr code in browser"

multi-factor-authentication.sh: Remove mention of qr code since it is not working

multi-factor-authentication.cfg: Fix typos and improve concision.

multi-factor-authentication.*: Provide 5 fields for SSH pub keys

library.sh: Support parameters with 'allow_unsafe'

multi-factor-authentication.sh: Remove debug output

multi-factor-authentication.sh: Fix typo in variable name

Commits on Jan 22, 2020

Merge branch 'devel' into feature/multi-factor-ssh