15 点作者 tompic823超过 7 年前

2 条评论

toast0超过 7 年前

The secure configuration means when Duo is down, you can't login, unless you have some out of band login method that's not protected by Duo. That is a pretty big commitment to Duo's uptime, and it makes sense that it's not the default.

评论 #15204810 未加载

graton超过 7 年前

Personally I use the google-authenticator PAM module for two factor authentication for SSH.<p><a href="https://github.com/google/google-authenticator-libpam" rel="nofollow">https://github.com/google/google-authenticator-libpam</a>

Leveraging Duo Security’s Default Configuration to Bypass SSH Two-Factor Auth

2 条评论

Leveraging Duo Security’s Default Configuration to Bypass SSH Two-Factor Auth

2 条评论