Page 1 of 1

Dual or two factor Authentication

Posted: Wed Mar 17, 2021 12:09 am
by dames
Is it possible to require two of the authentication methods simultaneously?
I would like to require both a client certificate and a username/ password to authenticate.
i have explored and experimented, but I cannot see how to do this.

thank you in advance.

Re: Dual or two factor Authentication

Posted: Wed Mar 17, 2021 3:28 pm
by nobody12
You could setup authentication through radius with motp.
I made a test and did setup motp with sucess. (motp requires a password/pin of the user plus a generated otp by an motp password generator (usb stick/mobile phone) which is tied to the time plus an initial seed). For me this is a two factor authentication.
But this is not certificate plus username/password.

Re: Dual or two factor Authentication

Posted: Wed Mar 17, 2021 5:34 pm
by dames
Thank you
that sounds like an excellent solution, however I am unfamiliar with motp.
I'll look into it as a possible solution.

Re: Dual or two factor Authentication

Posted: Wed Mar 17, 2021 5:49 pm
by nobody12
There is an old but working and easy to install solution for this (which I used):
https://github.com/MOTP-AS/MOTP-AS/blob/master/INSTALL
motp.JPG
followup: The code for this is based on an "old" php version. If you want to run this on newer PHP without manually patching the code, there is an adapter availiable as a php include:
https://github.com/rubo77/php-mysql-fix ... ql.inc.php
motp generators an information about motp:
http://motp.sourceforge.net/

Re: Dual or two factor Authentication

Posted: Fri Mar 26, 2021 1:44 am
by dames
thank you very much. i'll check this out.