| Author |
|
RegieW
Joined: 05 May 2020
Posts: 4
Location: USA, Gretna
|
 Posted: Wed 06 May '20 15:02 Post subject: Google-Authenticator on AIX |
 |
|
hello,
This is my first post. I hope I'm in the right category.
I was hoping to find out if anyone has got the google authentication module to work on aix 7.2 i have downloaded the files from here https://code.google.com/archive/p/google-authenticator-apache-module/downloads
and after a couple weeks of trial and error finally i got "authn_google_module" to show up when running apachectl -M. I've found a few website that have procedures but are are for linux and don't work for aix.
My sticking point seems to be running a binary called "google-authenticator". It is no where on the system. I figured it should be after compiling it but it is not. I even tried downloading and running the binary from the above website but that did not work. Any help is appreciated.
Thanks. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Thu 14 May '20 19:25 Post subject: |
|
|
| The standard linux binaries with ELF header will not work, but you can look for binaries or source code for FreeBSD, OpenBSD that should be compatible. |
|
| Back to top |
|
RegieW
Joined: 05 May 2020
Posts: 4
Location: USA, Gretna
|
| Posted: Thu 14 May '20 23:05 Post subject: |
|
|
| Will do. Thanks for the info |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Fri 15 May '20 19:05 Post subject: |
|
|
| Please report back, if you found a solution. |
|
| Back to top |
|
RegieW
Joined: 05 May 2020
Posts: 4
Location: USA, Gretna
|
| Posted: Sat 16 May '20 0:40 Post subject: |
|
|
Unfortunately didn't find much help searching freebsd or openbsd. it seems that they all want you to run some form of yum to automatically download and install the software, not even sure the links they give are active anymore anyway as i could not go to them through aix or the browser or maybe the repositories were only accessible using there os. Anyway the file I got from here https://code.google.com/archive/p/google-athenticator-apache-module/downloads that I did get to compile and load into apache are the closest I seem to be able to get. the google-authenticator binary is still a mystery. Probably end up scraping the idea and search for other options.
looks like google-auth came out around 2010 and the file I downloaded above is from 2013. maybe I should be looking for something newer.
Thanks for your suggestion
Regie |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
|
| Back to top |
|
RegieW
Joined: 05 May 2020
Posts: 4
Location: USA, Gretna
|
| Posted: Mon 18 May '20 17:51 Post subject: |
|
|
Oh I've seen about every website out there on the subject and have tried bits and piece from them to try and make on aix. Can't say I went in debt on this site as it is ubuntu and things like app-get and other commands don't work on aix, scripts are also bash. We use csh. I was surprised I actually got the google module compiled and able to add as a module in httpd.conf but as far as knowing what I can do with it remains a mystery. I'm guessing it would require adding things in httpd.conf to use it as well as things getting changed in other files like /usr/lib/security/pam but that is above my knowledge.
Maybe if I could do that I would not need the google-authenticator binary. This 2fa is new to me but thought i would have a run at it as we like the idea of a code sent to an email address or phone. like for example RSA. Not sure how much it costs to use something like RSA but i did see an RSA token was $500 and if that is per user then no. Anyway thanks again James for your suggestions.  Regie |
|
| Back to top |
|
