<![CDATA[Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ?]]>For the common of mortal libpam-google-authenticator allow you to request a OTP for your SSH connection. (more info)

Since nothing is bullet proof and security work by layer, I tough it might worth it to add a layer on this precious access.

What do you think ?

]]>https://forum.cloudron.io/topic/2881/do-you-know-an-alternative-to-libpam-google-authenticator-and-do-you-think-it-should-be-implemented-in-cloudronRSS for NodeTue, 21 Jul 2026 20:17:58 GMTMon, 20 Jul 2020 07:07:03 GMT60<![CDATA[Reply to Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ? on Wed, 22 Jul 2020 15:25:54 GMT]]>@JOduMonT Thanks! merged, should be part of our next deploy.

]]>https://forum.cloudron.io/post/11212https://forum.cloudron.io/post/11212Wed, 22 Jul 2020 15:25:54 GMT<![CDATA[Reply to Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ? on Wed, 22 Jul 2020 02:28:31 GMT]]>@girish said in Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ?:

I have added a section here to follow this DO guide

thanks for your consideration
BTW I tried to update (PR) the ipset part of the doc since maxmind change their licensing and this command don't work anymore

wget http://geolite.maxmind.com/download/geoip/database/GeoIPCountryCSV.zip
]]>https://forum.cloudron.io/post/11174https://forum.cloudron.io/post/11174Wed, 22 Jul 2020 02:28:31 GMT<![CDATA[Reply to Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ? on Tue, 21 Jul 2020 04:08:02 GMT]]>I have added a section here to follow this DO guide

]]>https://forum.cloudron.io/post/11060https://forum.cloudron.io/post/11060Tue, 21 Jul 2020 04:08:02 GMT<![CDATA[Reply to Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ? on Mon, 20 Jul 2020 20:52:59 GMT]]>For the moment, I will add it to our docs as @mehdi suggested.

]]>https://forum.cloudron.io/post/11029https://forum.cloudron.io/post/11029Mon, 20 Jul 2020 20:52:59 GMT<![CDATA[Reply to Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ? on Mon, 20 Jul 2020 08:21:39 GMT]]>@mehdi said in Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ?:

again like fail2ban ( https://cloudron.io/documentation/security/#fail2ban )

LOL! I thought Fail2Ban was installed by default and every containers, or at least few, where interacting with it, not to mention it again but MailCow run fail2ban by default as a container to protect SOGo and the entire Mail Stack.

]]>https://forum.cloudron.io/post/10970https://forum.cloudron.io/post/10970Mon, 20 Jul 2020 08:21:39 GMT<![CDATA[Reply to Do you know an alternative to libpam-google-authenticator and do you think it should be implemented in Cloudron ? on Mon, 20 Jul 2020 07:47:53 GMT]]>I think this can be installed manually by the admin on the underlying OS.

I do think it's valuable, but I believe it should be kept separate from cloudron and installed by itself on the side, a bit like Fail2ban is today. It could however be mentioned in the docs, again like fail2ban ( https://cloudron.io/documentation/security/#fail2ban )

]]>https://forum.cloudron.io/post/10968https://forum.cloudron.io/post/10968Mon, 20 Jul 2020 07:47:53 GMT