On Fri, Jan 11, 2013 at 2:08 PM, Tom Limoncelli <[email protected]> wrote:
> I didn't want to muddy the waters by mentioning additional products > but, yes, I've had good success with google-authenticator. I have it > on my personal FreeBSD system (the PAM module works great) and I use > it with my personal Google Apps domain. > http://everythingsysadmin.com/2012/08/using-google-2-factor-authenti.html Same on Linux, and for a team of engineers, I can't recommend it highly enough. I set it up in about 20 minutes, which was basically installing libpam-google-authenticator, running the TOTP setup, and taking a photo of the resulting ASCII QR code (neat to see). I've got more at http://troy.yort.com/making-2-factor-authentication-viral/. Authenticator is It's actually quite user friendly once someone has had the phone app installed and received a 5 minute intro. Only the SSH/PAM part needs an engineering mindset, and anyone using SSH presumably has one. I think it would satisfy most Google Apps for Your Domain enterprise users. Troy -- http://troy.yort.com/ -- https://papertrailapp.com/
_______________________________________________ Discuss mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
