TOTP gateway for any service on any server
Hi all,
I've just created a general purpose TOTP "gatekeeper" that is designed to gate access to any service on any server/OS (as long as traffic can only go *through* the TOTP gatekeeper).
The inspiration was Konstantin Ryabitsev's implementation of two-factor authentication for kernel.org -- from which I got the idea of "use TOTP to whitelist an IP for some time".
I then extended it to protect any TCP port on any server behind the gatekeeper. http://gitolite.com/totport/ is the documentation, and the source is linked there.
I'd welcome any feedback but please be mindful of the fact that deep discussion may veer way off-topic for the git or gitolite mailing lists, although I hope I won't get flak for *this* email :-)
sitaram
Signature · 3 lines
You received this message because you are subscribed to the Google Groups "gitolite" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
Sitaram
Looks good and can be very useful. I can even image some edge cases of using this in automation. Will have to find the time to test this.
Quoted 24 lines · Sitaram Chamarty
Hi all,
I've just created a general purpose TOTP "gatekeeper" that is designed to gate access to any service on any server/OS (as long as traffic can only go *through* the TOTP gatekeeper).
The inspiration was Konstantin Ryabitsev's implementation of two-factor authentication for kernel.org -- from which I got the idea of "use TOTP to whitelist an IP for some time".
I then extended it to protect any TCP port on any server behind the gatekeeper. http://gitolite.com/totport/ is the documentation, and the source is linked there.
I'd welcome any feedback but please be mindful of the fact that deep discussion may veer way off-topic for the git or gitolite mailing lists, although I hope I won't get flak for *this* email :-)
sitaram
--
You received this message because you are subscribed to the Google Groups "gitolite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
Signature · 6 lines
~ Andrew "lathama" Latham [email protected] http://lathama.net ~ -- You received this message because you are subscribed to the Google Groups "gitolite" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.