Hacker News Reader

Comment by pettycashstash2 | Hacker News Reader

I didn’t know you could add google Authenticator to your server. Thank you for this write up.

You don't have to use a closed source TOTP client such as Google's. There's RedHat's FreeOTP and there's another open source one called antOTP. You can find them on F-Droid as well.

There have been TOTP PAM modules for ages (these work on a Linux client and Linux server via e.g. SSH). You can even add YubiKey to PAM. Same for BSD Auth and macOS.

> RedHat's FreeOTP

It's abandonware these days and hasn't been updated for years. The iOS app doesn't work anymore and can't use the camera for reading codes.

I use it on ios, and so does most of Red Hat employees (they state it is a preferred version of tfa over the google app.)

It's not broken for the 15 or so accounts I use it for.

Try the "scan code" button which should activate the camera and the app will crash. I just tested it with my iPhone and verified. The iOS App Store application was last updated 4 years ago. There's also comments there saying it doesn't work anymore.

Reading / using existing codes might work properly, or manually inputting them.

Nope. I used that feature just today to add another account. Works on my iPhone X.

Also, the last commit to the app was a year ago, if you head to their github page.

https://github.com/freeotp/freeotp-ios/commits/master

Interestingly my wife's XS is having the problem you describe but not my X.

I've sent a note to the maintainers, but there's an open git issue for it. Not sure when their commits will roll to the store.

I'm told by multiple colleagues at redhat that they've raised this with internal support, so it should be sorted eventually. Lots of iphones in redhat and this is the app they officially support for TFA internally.

TOTP/HOTP hasn't changed for years. The app works perfectly for me and needs no updates.

When I was researching, literally every article I read mentioned Google'S TOTP PAM module. I can't even find any other ones that have active development. Do you know of any? Would love to use another one if it works with my iOS authenticator app.

Yes, you can add it to almost anything and the best part is; you don’t have to be online to generate and/or verify the code.

I'm surprised Authy doesn't have a pam module: https://github.com/authy/authy-ssh/issues/53

Authy's mobile app should work with Google's TOTP PAM module.

If you have an NFC YubiKey and an Android phone with NFC then the Yubico Authenticator is pretty awesome. You can store your OTP tokens on your YubiKey. Also open source.

https://github.com/Yubico/yubioath-android

You're welcome. Glad it helped someone!

Reply on news.ycombinator.com