sshfs-win icon indicating copy to clipboard operation
sshfs-win copied to clipboard

Published 20 hours ago • verified publisher icon winfsp

Google Authenticator

Open Verequies opened this issue 4 years ago • 4 comments

It would be great if sshfs-win supported Google Authenticator 2FA. I have recently employed this as an extra security precaution on my servers and as such members of my team who use Windows are not able to connect with sshfs-win anymore.

Verequies avatar Dec 13 '20 02:12 Verequies

I also have this issue with Duo 2FA. There isn't a second prompt so there is no way to connect.

zrayburn avatar Jan 13 '21 23:01 zrayburn

I know it isn't a fix, but you could add a bash script to your servers to disable the use of 2fa for a short time before mounting the drives and then re-enabling it, that's how i have done it.

BCVerdouw avatar Jan 18 '21 20:01 BCVerdouw

You could do that, but that is also a huge security vulnerability. You're best off having two users at the moment for those who need SSHFS and configure pam to not require 2FA for users in a particular group. Or at the moment, I only allow SSHFS on Windows to connect if the user has an SSH key setup.

Verequies avatar Jan 19 '21 01:01 Verequies

I also have this issue with Duo 2FA. There isn't a second prompt so there is no way to connect.

I am dealing with the same thing. One thing I did find is if you use duo unix without PAM it will do a push notification automatically and works good. I have to make it work with tokens too so not a good work around for me.

Less secure but this method works with push only in DUO https://duo.com/docs/loginduo

mark-sellars avatar Sep 03 '21 17:09 mark-sellars