Loading...
 

History: How to install Two Factor Authentication for ClearOS

Preview of version: 19

Within a few minutes of your ClearOS instance being on a public IP, there will be a flood of attempts to compromise it. So you should use a very strong password. Even better is to set up Two Factor Authentication.

This protects the ClearOS admin panel (Webconfig). Once you are logged in, you can use the Dynamic Firewall to temporarily permit access to other apps (SSH, VPN, etc)

Install

From the Marketplace

Install from web interface (in the System section), like all the other apps: Two-factor authentication (2FA) for Webconfig (ClearOS spp)

Manually

2FA for Webconfig on a ClearOS 7
yum --enablerepo=clearos-updates-testing,clearos-contribs-testing install app-two-factor-auth


Once installed, find the relevant admin panel and configure for your needs.

The information about the configuration is at /etc/clearos/two_factor_auth.conf (useful if you can't log in via the ClearOS admin panel because you are not receiving the emails)

Sending to more than one email

If you need to add more than one email address (which is typical for the root account, just create a redirect ( rootmfa at example.org -> joe at example.org and jane at example.org and use mail forwarding.

About SMS text messages

You can also forward emails to SMS but be aware that SMS-based two-step verification is no longer recommended by NIST


Related:

History

Advanced
Information Version
Marc Laporte We are official! 22
View
Marc Laporte 21
View
Marc Laporte 20
View
Marc Laporte Now in Marketplace 19
View
Marc Laporte 18
View
Marc Laporte 17
View
Marc Laporte 16
View
Marc Laporte 15
View
Marc Laporte 14
View
Marc Laporte done! 13
View
Marc Laporte 12
View
Marc Laporte 11
View
Marc Laporte 10
View
Marc Laporte 9
View
Marc Laporte 8
View
Marc Laporte 7
View
Marc Laporte 6
View
Marc Laporte 5
View
Marc Laporte 4
View
Marc Laporte 3
View
Marc Laporte Code Plugin modified by editor. 2
View
Marc Laporte 1
View