[Info-vax] Two-Factor Authentication

[Craig A. Berry]

On 10/22/19 7:59 PM, Arne Vajhøj wrote:
> On 10/22/2019 8:32 PM, VAXman- at SendSpamHere.ORG wrote:
>> In article <qoo2jl$3jt$2 at gioia.aioe.org>, =?UTF-8?Q?Arne_Vajh=c3=b8j?= 
>> <arne at vajhoej.dk> writes:
>>> On 10/22/2019 2:01 PM, VAXman- at SendSpamHere.ORG wrote:
>>>> Is anyone here using a two-factor authentication scheme with OpenVMS?
>>>
>>> For?
>>>
>>> VMS login over TCP/IP?
>>>
>>> VMS login console?
>>>
>>> Login some web application residing on VMS?
>>
>> Most likely for ssh and web application.>
> 
> SSH: passsword + client certificate (not sure how that works on VMS though)
> 
> web app: password + client certificate *or* password + text message with 
> pin (either via email to text gateway or an text messaging provider 
> offering a web service API)

Setting up external authentication on VMS via Active Directory or
OpenLDAP or such, and then using Google Authenticator or Duo or similar
to manage the 2FA part, is probably the only way to do this on VMS right
now.  Short of writing your own ACME agent, which Brian is completely
capable of doing if he can convince someone to fund some weeks or months
of his time for the effort.