rdp server with 2FA?

[ToddAndMargo]

Hi All,

Is there an RDP server that runs on Fedora and that
has multi-factor authentication?  And that runs well.

Many thanks,
-T

[George N. White III]

On Tue, Mar 18, 2025 at 11:15 AM ToddAndMargo via users
 wrote:
> Hi All,
>
> Is there an RDP server that runs on Fedora and that
> has multi-factor authentication?  And that runs well.

You should be able to tunnel RDP over ssh and configure ssh to use
2-factor authentication:
https://idroot.us/ssh-two-factor-authentication-fedora-41/ or (less verbose):
https://ubuntu.com/tutorials/configure-ssh-2fa#2-installing-and-configuring-required-packages

I haven't tried this myself.   Fedora provides:

google-authenticator.x86_64: One-time pass-code support using open standards

[Jeffrey Walton]

On Wed, Mar 19, 2025 at 12:26 PM George N. White III  wrote:
> On Tue, Mar 18, 2025 at 11:15 AM ToddAndMargo via users
>  wrote:
> > Hi All,
> >
> > Is there an RDP server that runs on Fedora and that
> > has multi-factor authentication?  And that runs well.
>
> You should be able to tunnel RDP over ssh and configure ssh to use
> 2-factor authentication:
> https://idroot.us/ssh-two-factor-authentication-fedora-41/ or (less verbose):
> https://ubuntu.com/tutorials/configure-ssh-2fa#2-installing-and-configuring-required-packages
>
> I haven't tried this myself.   Fedora provides:
>
> google-authenticator.x86_64: One-time pass-code support using open standards

Possibly related (or possibly an off-topic rabbit hole)... Fedora also
provides YubiKey support:

$ dnf search yubikey
...
Matched fields: name, summary
 libyubikey.i686: C library for decrypting and parsing Yubikey
One-time passwords
 libyubikey.x86_64: C library for decrypting and parsing Yubikey
One-time passwords
 libyubikey-devel.i686: Development files for libyubikey
 libyubikey-devel.x86_64: Development files for libyubikey
...

I especially like YubiKeys. Especially the current ones because they
provide public/private key crypto, and implement the FIDO2 and
WebAuthn protocols. The original ones implement the shared-secret
OTP's like HOTP and TOTP, using the original FIDO protocol.

Jeff

[ToddAndMargo]

On 3/18/25 7:14 AM, ToddAndMargo via users wrote:
> Hi All,
>
> Is there an RDP server that runs on Fedora and that
> has multi-factor authentication?  And that runs well.
>
> Many thanks,
> -T

Found this.  Don't know if it works or not.

Using Authy or Google Authenticator for 2FA with XRDP:

https://github.com/neutrinolabs/xrdp/wiki/Using-Authy-or-Google-Authenticato...

It is very, very long winded

[ToddAndMargo]

On 4/13/25 9:22 PM, ToddAndMargo via users wrote:
> On 3/18/25 7:14 AM, ToddAndMargo via users wrote:
> > Hi All,
> >
> > Is there an RDP server that runs on Fedora and that
> > has multi-factor authentication?  And that runs well.
> >
> > Many thanks,
> > -T
>
> Found this.  Don't know if it works or not.
>
> Using Authy or Google Authenticator for 2FA with XRDP:
>
> https://github.com/neutrinolabs/xrdp/wiki/Using-Authy-or-Google- 
> Authenticator-for-2FA-with-XRDP
>
> It is very, very long winded

The xrdp forum just told me the above:

"The 2FA is configured in xrdp-sesman, which is only
      used for xrdp logins."

Hopefully I will be able to test this in the next week or
so.  I will get back