# [slightly OT?] TOTP gateway for any service on any server 2 messages from 2014-09-20 to 2014-09-20. Participants: Sitaram Chamarty, Andrew Latham. Thread: https://gitlist.dev/t/37602 ## Sitaram Chamarty, 2014-09-20 13:50 Subject: [slightly OT?] TOTP gateway for any service on any server Message-ID: <541D860A.9040203@gmail.com> URL: https://gitlist.dev/e/541D860A.9040203%40gmail.com ``` Hi all, I've just created a general purpose TOTP "gatekeeper" that is designed to gate access to any service on any server/OS (as long as traffic can only go *through* the TOTP gatekeeper). The inspiration was Konstantin Ryabitsev's implementation of two-factor authentication for kernel.org -- from which I got the idea of "use TOTP to whitelist an IP for some time". I then extended it to protect any TCP port on any server behind the gatekeeper. http://gitolite.com/totport/ is the documentation, and the source is linked there. I'd welcome any feedback but please be mindful of the fact that deep discussion may veer way off-topic for the git or gitolite mailing lists, although I hope I won't get flak for *this* email :-) sitaram -- You received this message because you are subscribed to the Google Groups "gitolite" group. To unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com. For more options, visit https://groups.google.com/d/optout. ``` ## Andrew Latham, 2014-09-20 14:46 Subject: Re: [slightly OT?] TOTP gateway for any service on any server Message-ID: URL: https://gitlist.dev/e/CA%2Bqj4S_DOD%3DjVQBciA1sAJHNVu1VjMjr4LtZMgK-31zUp2uxmw%40mail.gmail.com In-Reply-To: <541D860A.9040203@gmail.com> ``` Sitaram Looks good and can be very useful. I can even image some edge cases of using this in automation. Will have to find the time to test this. On Sat, Sep 20, 2014 at 8:50 AM, Sitaram Chamarty wrote: > Hi all, > > I've just created a general purpose TOTP "gatekeeper" that is designed > to gate access to any service on any server/OS (as long as traffic can > only go *through* the TOTP gatekeeper). > > The inspiration was Konstantin Ryabitsev's implementation of two-factor > authentication for kernel.org -- from which I got the idea of "use TOTP > to whitelist an IP for some time". > > I then extended it to protect any TCP port on any server behind the > gatekeeper. http://gitolite.com/totport/ is the documentation, and the > source is linked there. > > I'd welcome any feedback but please be mindful of the fact that deep > discussion may veer way off-topic for the git or gitolite mailing lists, > although I hope I won't get flak for *this* email :-) > > sitaram > > -- > You received this message because you are subscribed to the Google Groups "gitolite" group. > To unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. -- ~ Andrew "lathama" Latham lathama@lathama.com http://lathama.net ~ -- You received this message because you are subscribed to the Google Groups "gitolite" group. To unsubscribe from this group and stop receiving emails from it, send an email to gitolite+unsubscribe@googlegroups.com. For more options, visit https://groups.google.com/d/optout. ```