4th October, 2017
SSH password two-factor authentication
Anyone SSH-ing in to theor accounts on
oak.waxworlds.org with a password will
now also find that they need to enter a verification code in addition to their
We're using Google Authenticator (which is a procedure to perform time-based one-time password authentication, not a Google service).
If you use SSH with keys, these will continue to work as before. Two-factor authentication is only used alongside password authentication.
Users wanting to be able to SSH in with a password will need to either
contact me, and I will set up a secret key for your account, or
google-authenticatorfrom the command line on
oakto set it up for themselves. The command will generate your secret key, ask you a few questions and then save a local
You will probably want to install the Google Authenticator app on your phone/tablet/watch (it is free/libre and open source and available on F-Droid). There are also several other FOSS OTP authenticator apps that are compatible.
Back to service updates page.