{"thread":{"id":"37602","subject":"[slightly OT?] TOTP gateway for any service on any server","startedAt":"2014-09-20T13:50:02Z","lastAt":"2014-09-20T14:46:17Z","messageCount":2,"participants":["Sitaram Chamarty","Andrew Latham"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"249696","messageId":"541D860A.9040203@gmail.com","threadId":"37602","inReplyTo":null,"subject":"[slightly OT?] TOTP gateway for any service on any server","fromName":"Sitaram Chamarty","fromEmail":"sitaramc@gmail.com","sentAt":"2014-09-20T13:50:02Z","receivedAt":"2014-09-20T13:50:02Z","isPatch":false,"sender":{"key":"sitaramc@gmail.com","avatar":"https://avatars.githubusercontent.com/u/43316?v=4"},"body":"Hi all,\n\nI've just created a general purpose TOTP \"gatekeeper\" that is designed\nto gate access to any service on any server/OS (as long as traffic can\nonly go *through* the TOTP gatekeeper).\n\nThe inspiration was Konstantin Ryabitsev's implementation of two-factor\nauthentication for kernel.org -- from which I got the idea of \"use TOTP\nto whitelist an IP for some time\".\n\nI then extended it to protect any TCP port on any server behind the\ngatekeeper.  http://gitolite.com/totport/ is the documentation, and the\nsource is linked there.\n\nI'd welcome any feedback but please be mindful of the fact that deep\ndiscussion may veer way off-topic for the git or gitolite mailing lists,\nalthough I hope I won't get flak for *this* email :-)\n\nsitaram\n\n-- \nYou received this message because you are subscribed to the Google Groups \"gitolite\" group.\nTo unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com.\nFor more options, visit https://groups.google.com/d/optout.\n"},{"id":"249697","messageId":"CA+qj4S_DOD=jVQBciA1sAJHNVu1VjMjr4LtZMgK-31zUp2uxmw@mail.gmail.com","threadId":"37602","inReplyTo":"541D860A.9040203@gmail.com","subject":"Re: [slightly OT?] TOTP gateway for any service on any server","fromName":"Andrew Latham","fromEmail":"lathama@gmail.com","sentAt":"2014-09-20T14:46:17Z","receivedAt":"2014-09-20T14:46:17Z","isPatch":false,"sender":{"key":"lathama@gmail.com","avatar":null},"body":"Sitaram\n\nLooks good and can be very useful. I can even image some edge cases of\nusing this in automation. Will have to find the time to test this.\n\nOn Sat, Sep 20, 2014 at 8:50 AM, Sitaram Chamarty <sitaramc@gmail.com> wrote:\n> Hi all,\n>\n> I've just created a general purpose TOTP \"gatekeeper\" that is designed\n> to gate access to any service on any server/OS (as long as traffic can\n> only go *through* the TOTP gatekeeper).\n>\n> The inspiration was Konstantin Ryabitsev's implementation of two-factor\n> authentication for kernel.org -- from which I got the idea of \"use TOTP\n> to whitelist an IP for some time\".\n>\n> I then extended it to protect any TCP port on any server behind the\n> gatekeeper.  http://gitolite.com/totport/ is the documentation, and the\n> source is linked there.\n>\n> I'd welcome any feedback but please be mindful of the fact that deep\n> discussion may veer way off-topic for the git or gitolite mailing lists,\n> although I hope I won't get flak for *this* email :-)\n>\n> sitaram\n>\n> --\n> You received this message because you are subscribed to the Google Groups \"gitolite\" group.\n> To unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com.\n> For more options, visit https://groups.google.com/d/optout.\n\n\n\n-- \n~ Andrew \"lathama\" Latham lathama@lathama.com http://lathama.net ~\n\n-- \nYou received this message because you are subscribed to the Google Groups \"gitolite\" group.\nTo unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com.\nFor more options, visit https://groups.google.com/d/optout.\n"}]}