<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>There are two-factor authentication solutions where the two factors can be entered at once in a single common input field i.e. PIN+TOKENCODE simply by concatenating the two factors, this way only one input field is used not two separate one.</div>
<div> </div>
<div>cheers</div>
<div>Swizz Ly</div>
<div>
<div name="quote" style="margin: 10px 5px 5px 10px; padding: 10px 0px 10px 10px; border-left-color: rgb(195, 217, 229); border-left-width: 2px; border-left-style: solid; -ms-word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin: 0px 0px 10px;"><b>Gesendet:</b> Mittwoch, 23. November 2016 um 14:31 Uhr<br/>
<b>Von:</b> "Mihai Moldovan" <ionic@ionic.de><br/>
<b>An:</b> "swizz ly" <swizz.ly@gmx.ch><br/>
<b>Cc:</b> x2go-user@lists.x2go.org<br/>
<b>Betreff:</b> Re: Aw: Re: [X2Go-User] X2Go Two-factor-authentication with SecurID</div>
<div name="quoted-content">On 23.11.2016 02:03 PM, swizz ly wrote:<br/>
> Thanks for the update. I tried it, it works nicely, many thanks! However, there<br/>
> is a small thing: the user has to be aware that the "Password:" in the first<br/>
> window is ignored and has nothing to do with the two factor authentication, only<br/>
> in the pop-up window with the "Verification code:" should he/she enter the<br/>
> two-factor passcode. It might be somewhat confusing for the first time. As a<br/>
> small suggestion, I would either use the input from the "Password:" field even<br/>
> for the two-factor passcode, or in the pop-up window I would directly copy the<br/>
> prompt from the SSH session, in this case "Enter PASSCODE:" instead of<br/>
> "Verification code:".<br/>
<br/>
I think that's the way PAM works.<br/>
<br/>
Isn't the idea of 2FA to use both the password and a challenge auth token? Users<br/>
will need to supply their password anyway, so I don't see the problem at hand<br/>
currently. Do we get two windows, one for the password (or private key<br/>
passphrase) and one for the verification code, EVEN THOUGH the password/private<br/>
key passphrase has been set directly in the session config or via an SSH agent?<br/>
<br/>
Copying the prompt actually sounds like a good idea, though, yeah.<br/>
<br/>
<br/>
<br/>
Mihai<br/>
<br/>
</div>
</div>
</div>
</div></div></body></html>