[slightly OT?] TOTP gateway for any service on any server

Sitaram Chamarty· Sep 20, 2014, 13:50 UTC · lore

Hi all,

I've just created a general purpose TOTP "gatekeeper" that is designed to gate access to any service on any server/OS (as long as traffic can only go *through* the TOTP gatekeeper).

The inspiration was Konstantin Ryabitsev's implementation of two-factor authentication for kernel.org -- from which I got the idea of "use TOTP to whitelist an IP for some time".

I then extended it to protect any TCP port on any server behind the gatekeeper. http://gitolite.com/totport/ is the documentation, and the source is linked there.

I'd welcome any feedback but please be mindful of the fact that deep discussion may veer way off-topic for the git or gitolite mailing lists, although I hope I won't get flak for *this* email :-)

sitaram

-- 
You received this message because you are subscribed to the Google Groups "gitolite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Andrew Latham· Sep 20, 2014, 14:46 UTC · re: Sitaram Chamarty · lore

Re: [slightly OT?] TOTP gateway for any service on any server

Sitaram

Looks good and can be very useful. I can even image some edge cases of using this in automation. Will have to find the time to test this.

On Sat, Sep 20, 2014 at 8:50 AM, Sitaram Chamarty <sitaramc@gmail.com> wrote:

Show 24 quoted lines

> Hi all,
>
> I've just created a general purpose TOTP "gatekeeper" that is designed
> to gate access to any service on any server/OS (as long as traffic can
> only go *through* the TOTP gatekeeper).
>
> The inspiration was Konstantin Ryabitsev's implementation of two-factor
> authentication for kernel.org -- from which I got the idea of "use TOTP
> to whitelist an IP for some time".
>
> I then extended it to protect any TCP port on any server behind the
> gatekeeper.  http://gitolite.com/totport/ is the documentation, and the
> source is linked there.
>
> I'd welcome any feedback but please be mindful of the fact that deep
> discussion may veer way off-topic for the git or gitolite mailing lists,
> although I hope I won't get flak for *this* email :-)
>
> sitaram
>
> --
> You received this message because you are subscribed to the Google Groups "gitolite" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 
~ Andrew "lathama" Latham lathama@lathama.com http://lathama.net ~

-- 
You received this message because you are subscribed to the Google Groups "gitolite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.