• Installed and configured totpcgi authentication on the staging environment. This performs the verification from the clients. There will be several servers doing authentication to prevent a single point of failure.
• Installed and configured pam_url on each staging client with the intent of connecting to the authentication servers.
• Enabled yubikey as an alternate second factor.
• Reviewed RPMs for pam_url and totpcgi (and a few others to help along the way)
• Setup the totpcgi provisioning web page for google authenticator
• Fixed fun bugs in pam_url
• Wrote documentation on how to setup authentication.

A few things were accomplished that were not part of the goals, but good stuff nonetheless:

• Enjoyed some awesome tapas at Buku (a restaurant is at the base of the Red Hat Tower)
• Found the open source cow
• Documented the setup of the OpenPGP SmartCard with gpg-agent and GNOME 3
• Watched Seth Vidal do some Beastie Boys!
• Enjoyed some yummy dinner at Gravy (thanks to Ruth Suehle and Red Hat)
• Discussed some ideas for FUDCon Lawrence and the future of FUDCons

While I didn’t participate in all of the above activities, I was definitely involved in many of them. It turns out, everyone there was fairly involved at the FAD. It was fun to watch everyone come together to solve this issue. Everyone seemed to have a good sense of satisfaction accomplishing the goals.

Cheers,

herlo

One of the perks I’ve been able to work out will be to attend the Fedora Activity Day this week in Raleigh, where we’ll be working on two-factor authentication among other things. This has been something I’ve recently set up at LF and am hopefully going to be involved in getting this working for Fedora as well.

Additionally, I have been working on getting a GPG SmartCard token working to accommodate ssh authentication. I think Fedora is going to be using Yubikeys, but I thought it might be cool to show this off as an alternative.

Anyway, it should be a fun week and very busy as well. Watch for more reports here about our progress.

Cheers,

Herlo