[PLUGIN] Cisco DUO 2FA for SSH

Plugins
1

This plugin adds two-factor authentication (2FA) for SSH sessions to your Volumio device. At this moment there are still some issues when changing the password, as some hard-coded functions require the default password. However, security can be hardened by adding two-factor authentication to (at least) starting SSH sessions.

Logged in example

duo_logged_in_volumio
duo_logged_in_volumio805×498 9.05 KB

iOS push messages (example)

duo_ios_popup
duo_ios_popup1125×408 119 KB

duo_push_msg
duo_push_msg1125×2436 201 KB

I’ve already tested it myself, but it will require some more testing. It’s only for the brave (and security conscious) :wink:

Github repo: https://github.com/Saiyato/volumio-duo-plugin

2

Just performed some other tests (like delete the app in the DUO dashboard), as noted earlier, it fails-open. So I just quickly created a new app, copied the new keys and we’re good to go again.

Also, you only need to enroll your device once, and you can use DUO for other sites as well, just like the MSoft/Google ones.

3

I have been using the plugin for quite some time now, no issues whatsoever. So you can scrap the “only for the brave” part. It’s now regarded stable.