How to set up two-factor authentication VPN (mpd5)?

P

post_ed2019-08-27 15:40:24

FreeBSD

post_ed, 2019-08-27 15:40:24

Good afternoon, colleagues, share the material, who implemented this
How to set up two-factor VPN authorization (mpd5)?
OS: FreeBSD
not necessarily via sms
what second factor can be built in?

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

V

Vladimir Goncharov, 2019-08-27
@mikluha

By itself, mpd5 can't do anything like that. But for authorization, he knows how to access the RADIUS server. And through RADIUS (for example, freeradius) you can configure whatever you want. You can, for example, Google totp. But with SMS, as on most sites, it probably won't work. There is no way to ask the user for something, unless at the first authorization send an SMS and the user is not allowed, and then wait for the next authorization and the password from the SMS as a password.