nixCraft

Hi there,

I use ssh a lot to remotely logon to my linux box from home. I heard that some smart people can make to add extra security for the ssh that first asks for the pin number and then the root password authentication before the user can login to the machine. I appreciate that if anyone in here know how to and hook me up with that. Thank you.

lacloai:

I have written a few how-to on this that may help you.

Configuring SSH To Use Freeradius And WiKID For Two-Factor Authentication | HowtoForge - Linux Howtos and Tutorials
Secure your SSH deployment with WiKID two-factor authentication | HowtoForge - Linux Howtos and Tutorials

Those mostly deal with our enterprise version. For two-factor authentication fo the home, you might want to see our open source version, which doesn't support radius. However, you should be fine with pam_tacacs:
Using WiKID Strong Authentcation with TACACS+ — WiKID Open Source Strong Authentication

If you go the oss route, be sure to read the forums on our sourceforge page:
SourceForge.net: WiKID Strong Authentication System

There are some helpful tips there.

hth,

nick