#78 Google Autenticator, S/Key and others one pass tokens

closed
nobody
5
2012-12-17
2012-12-17
Roberto Spadim
No

Hi guys, NppFTP is a very very nice tool, first verrrryyy good job guys!

Well today i'm using nppftp inside my office, in other words, it's a very secure network, it's wired and don't have access to internet
But now, i will start some travels, and i will need security
Well the main problem is man-in-the-middle attack, there's many solutions, but i think the most usefull solution is one pass token (like banks account)
Google create a very nice one pass token solution

http://www.mnxsolutions.com/security/two-factor-ssh-with-google-authenticator.html

it's works like a pam.d module in other words...
instead of only user + password, i need user + password + token generated

since token is one thing that only i have and know, it's very secure (the only point of fail here is physical access to sever, but ok i will put it in a secure zone)

well, what i need? i need implement google autenticator with nppftp
could anyone help me? i can help developing too, maybe donate via paypal if needed too

thank guys, any doubts please contact me at rspadim@gmail.com

Discussion

  • Roberto Spadim
    Roberto Spadim
    2012-12-17

    only one comment:
    here is log from server that can't connect to ssh with google authenticator:

    [NppFTP] Everything initialized
    [NppFTP] Cannot start FTP session
    Connecting
    [SFTP] Host key accepted
    [SFTP] Password authentication denied.
    [SFTP] Unable to authenticate
    Unable to connect
    Disconnected

     
  • Roberto Spadim
    Roberto Spadim
    2012-12-17

    =D keyboard interaction works!
    sorry guys! it's work very nice ;)

     
  • Roberto Spadim
    Roberto Spadim
    2012-12-17

    • status: open --> closed