What's new in OpenSSH 6.2

Posted Aug 16, 2013 3:58 UTC (Fri) by dugsong (guest, #79624)
In reply to: What's new in OpenSSH 6.2 by nix
Parent article: What's new in OpenSSH 6.2

We implemented a native kbdint driver for Duo Security's two-factor authentication for OpenSSH ("keyboard-interactive:duo"), coordinated with markus' AuthenticationMethods submethod commit. Code and docs here:

https://github.com/duosecurity/libduo/tree/master/openssh

A similar experience can be achieved using our ForceCommand trick, which doesn't require any sshd changes or root access:

https://blog.duosecurity.com/2011/04/ssh-keys-that-call-y...

But the latter approach doesn't prevent port forwarding before secondary authentication.