LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 06-29-2021, 05:03 AM   #1
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Rep: Reputation: 144Reputation: 144
Question 2FA


hi, does anyone know of 2FA opensource cross-platform software which works on slackware 14.2 or higher (and windows 10) with paypal 2FA (and doesn't require a mobile) ?
They (paypal) used to work with vipaccess for which there was a python opensource project that worked on slackware, but they decided to retire that :-(.
Now I'm looking for an alternative. So far I've just found authy, but that uses snap which uses systemd so thats not available on slackware AFAIK.
 
Old 06-29-2021, 07:51 AM   #2
Chuck56
Member
 
Registered: Dec 2006
Location: Colorado, USA
Distribution: Slackware
Posts: 930

Rep: Reputation: 479Reputation: 479Reputation: 479Reputation: 479Reputation: 479
I think you're asking for how to receive text messages without a mobile. Have you tried using Google Voice? Text messages are, or can be, forwarded to email.
 
Old 06-29-2021, 08:27 AM   #3
shruggy
Senior Member
 
Registered: Mar 2020
Posts: 3,678

Rep: Reputation: Disabled
Why must it be cross-platform? On Windows, I'd use Authy or WinAuth. Flathub has Authenticator (packaged as gnome-authenticator in Debian) and OTPClient. Besides, there's oathtool (and its Go port, goathtool) for the command line. And OTPClient has a CLI version, too. There's also a wrapper for oathtool, easy2fa.

I never used Yubico Authenticator or Nitrokey Authenticator. I guess you cannot use them without respective USB keys.

Last edited by shruggy; 06-29-2021 at 02:38 PM.
 
Old 06-29-2021, 05:19 PM   #4
bosth
Member
 
Registered: Apr 2011
Location: British Columbia, Canada
Posts: 304

Rep: Reputation: 127Reputation: 127
Keepassxc supports TOTP, which PayPal can use for 2fa I believe.
 
Old 06-30-2021, 04:55 AM   #5
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Original Poster
Rep: Reputation: 144Reputation: 144
Chuck56: I looked at google voice, thanks for the pointer. unfortunately it is targetted towards US users, and I am in the UK. that means that it is not free to get texts in the uk.
just to be clear, as you guessed, I don't own or want/can afford a mobile phone, andI I don't get mobile reception where I live. my internet is via satellite, so I want to be able to continue using the likes of paypal who insist on 2FA, and have retired the software I had previously chosen.

shruggy: Cross platform is important to me because although I do almost all my dev work on slackware, i still use win10 for desktop use more often than not, and having the same solution for both os's makes things easier to manage/transfer hardware id's, etc.
so I don't want to be locked out of desktop use by choice of running either/both slackware/win10
thanks for the list though, it's worth looking at if bosth's suggestion doesn't pan out

bosth: thanks i'll have a look at keepassxc. there's a slackbuild which is good. I'll post back here if I have success.
 
Old 06-30-2021, 12:50 PM   #6
tramtrist
Member
 
Registered: Jul 2018
Location: Cincinnati USA
Distribution: Slackware
Posts: 549

Rep: Reputation: 343Reputation: 343Reputation: 343Reputation: 343
I've been tooling around with https://jmp.chat/ and XMPP clients lately. It works fine for SMS
 
Old 06-30-2021, 02:32 PM   #7
Gerard Lally
Senior Member
 
Registered: Sep 2009
Location: Leinster, IE
Distribution: Slackware, NetBSD
Posts: 2,198

Rep: Reputation: 1776Reputation: 1776Reputation: 1776Reputation: 1776Reputation: 1776Reputation: 1776Reputation: 1776Reputation: 1776Reputation: 1776Reputation: 1776Reputation: 1776
I'm not sure if this would be feasible or acceptable, but you could possibly run an Android emulator on your Linux and/or Windows PC(s); I'm pretty sure there's one packaged with the Android SDK. After that you should be able to install whatever 2FA app takes your fancy.
 
Old 07-01-2021, 11:54 AM   #8
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Original Poster
Rep: Reputation: 144Reputation: 144
just a report back. I was able to get keepassxc working in both windows10 and slackware, and as I only intend to use it for totp I just coped the passworddb. this enabled me to remove the vipaccess software which paypal no longer supports and do paypal from my favourite os, and the one i need for work.

thanks all for your input.

Here's a quick howto for totp in keepassxc follows..
install it and deps. (sbopkg is your friend.) :-). create database and give it an access password
create and entry (click on the + )
put in a title eg: "my ebay"
put in a username (not going to be used, but it might want something. while in your new entry, click Entries-TOTP-Setup TOTP
login to paypal. in settings, enable 2fa and choose add 2fa application. it will give you a qrcode (and the actual code in text underneath). copy this code into the secret key in the "Setup TOTP" windows. leave everything at defaults, and click ok. click on ok to save your new entry. now rightclick on that entry, select TOTP-Show TOTP
this will show you the code to type into paypal to varify your authentication app. type it in and that is you setup.
to use, go to paypal, when it asks for the otp, open keepassxc (you'll find it under utilities in kde classic menu), type in your access password. right click on your entry eg "my ebay", select TOTP-Show TOTP and it will show you the OTP to type in (you can copy and paste it if you want). ta-da!
 
4 members found this post helpful.
Old 03-03-2022, 03:50 AM   #9
ruario
Senior Member
 
Registered: Jan 2011
Location: Oslo, Norway
Distribution: Slackware
Posts: 2,557

Rep: Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762
Quote:
Originally Posted by timsoft View Post
I've just found authy, but that uses snap which uses systemd so thats not available on slackware AFAIK.
I know this is old but FWIW you do not need snap or systemd to run authy. Just extract the package from the .snap (SquashFS) container and run it directly (or repackage it). This is also works for .snaps generally. You will tend to find a lot of redundant libs inside snap packages but you can just remove them if that bothers you.

Taking authy as an example (since that was your interest), find the download URL for the latest version like so:

Code:
wget -qO- --header X-Ubuntu-Series:\ 16 https://api.snapcraft.io/api/v1/snaps/details/authy | sed 's,.*download_url":"\(https.*\.snap\)".*,\1,'
Fetch and then unpack this package (either use "unsquashfs" or mount the .snap file as a loop device and copy out the contents to a new location).

Once you have the files you can (optionally) remove redundant snap-specific libs and other stuff if you want, like so:

Code:
rm -r command.sh data-dir desktop-common.sh desktop-gnome-specific.sh desktop-init.sh gnome-platform lib meta/snap.yaml usr
Now you can just launch "./authy" from within the extracted directory.

P.S. Bonus points if you make yourself a slackbuild.

Last edited by ruario; 03-05-2022 at 06:04 AM. Reason: My rm command was a little weird; corrected smiley; remove meta/snap.yaml
 
6 members found this post helpful.
Old 03-03-2022, 04:19 AM   #10
hazel
LQ Guru
 
Registered: Mar 2016
Location: Harrow, UK
Distribution: LFS, AntiX, Slackware
Posts: 7,675
Blog Entries: 19

Rep: Reputation: 4490Reputation: 4490Reputation: 4490Reputation: 4490Reputation: 4490Reputation: 4490Reputation: 4490Reputation: 4490Reputation: 4490Reputation: 4490Reputation: 4490
@ruario: I think you should write a more general version of that post (How to install snap packs on Slackware) and put it in the wiki Tips & Tricks.
 
2 members found this post helpful.
Old 03-03-2022, 05:21 AM   #11
ruario
Senior Member
 
Registered: Jan 2011
Location: Oslo, Norway
Distribution: Slackware
Posts: 2,557

Rep: Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762
@hazel Yeah that would be a good idea if I can find the time. I will say that for the majority of packages (I have been interested in) it is as simple as finding the URL using the trick above. The messy bit (on some packages) is usually due to stuff like: working out which libs and other files are redundant and can be deleted (because you have perfectly good ones on the system already); handling the fact that some binaries/libs have custom rpaths (or runpaths) that might need rewriting (via tools like chrpath or patchelf); checking startup scripts as these may have variables that need removing or altering.

I guess a wiki page could probably run through examples. I recall slack (the desktop messaging app, not this OS ) being annoying and in the end I just went with repacking their .deb instead because it was less work (though I am sure you could repackage the slack-desktop .snap contents if you really wanted to).

EDIT: One reason you might want to use the snap for slack app is that that AFAIK their "insider/edge" channel builds are only available here, not via rpm or deb.

Last edited by ruario; 03-04-2022 at 04:33 AM. Reason: Added a thought about why to you would use snap over deb as a base for repacks
 
1 members found this post helpful.
Old 03-03-2022, 05:33 AM   #12
ruario
Senior Member
 
Registered: Jan 2011
Location: Oslo, Norway
Distribution: Slackware
Posts: 2,557

Rep: Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762
For the most part with regards to finding the package you want you are just changing the "package name" in the URL (https://api.snapcraft.io/api/v1/snaps/details/{package name}) to match its name on the snapcraft "store". So if you wanted Chromium (https://snapcraft.io/chromium) you could do this:

Code:
wget -qO- --header X-Ubuntu-Series:\ 16 https://api.snapcraft.io/api/v1/snaps/details/chromium | python -mjson.tool
Or perhaps if you wanted the arm64 architecture build instead:

Code:
wget -qO- --header X-Ubuntu-Series:\ 16 --header X-Ubuntu-Architecture:\ arm64 https://api.snapcraft.io/api/v1/snaps/details/chromium | python -mjson.tool
Or maybe you want the arm64 build from the beta stream:

Code:
wget -qO- --header X-Ubuntu-Series:\ 16 --header X-Ubuntu-Architecture:\ arm64 'https://api.snapcraft.io/api/v1/snaps/details/chromium?channel=beta' | python -mjson.tool
Yeah… ok maybe I should make a wiki page :P

P.S. If I don't get around to it and someone else does that is obviously perfectly fine. I just worked these thing out from playing around and looking at snap documentation.
 
1 members found this post helpful.
Old 03-03-2022, 05:54 AM   #13
ruario
Senior Member
 
Registered: Jan 2011
Location: Oslo, Norway
Distribution: Slackware
Posts: 2,557

Rep: Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762
Ok, this is interesting. I was googling just now and I found an authy "PKGBUILD" for Arch Linux.

https://aur.archlinux.org/packages/authy

This is exceptionally close to what I described above (which is to be expected) but I do notice a couple differences. Perhaps most interesting is how they found the download URL.

Code:
curl -H 'Snap-Device-Series: 16' https://api.snapcraft.io/v2/snaps/info/authy | jq
It looks like they are using a newer version of the api to query snap meta data than I have used in the past (from when I first looked into snap packages, which was quite some time back). Perhaps that is better or more reliable going forward? I would tweak their example again ever so slightly because 'jq' is not installed by default on Slackware, plus you do not need progress echoed back on such a short request. So:

Code:
curl -sH Snap-Device-Series:\ 16 https://api.snapcraft.io/v2/snaps/info/authy | python -mjson.tool
This is perhaps a better starting point for a wiki entry given it uses a (seemingly) newer api.

Last edited by ruario; 03-05-2022 at 06:05 AM.
 
1 members found this post helpful.
Old 03-03-2022, 08:40 AM   #14
ruario
Senior Member
 
Registered: Jan 2011
Location: Oslo, Norway
Distribution: Slackware
Posts: 2,557

Rep: Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762Reputation: 1762
Ok, have not made a wiki page yet (I am supposed to be working) but to get back on the topic of the original thread here is a Github "gist" of how to get Authy installed on any distro that does not support snaps.

https://gist.github.com/ruario/46c52...f06c451914ada9

Yes… yes, I could have done a Slackbuild but I decided to keep this simple/generic as it is potentially more useful for people who stumble across this thread in searches. In any case enough is now explained that any semi-competent Slackware user could make one easily if they wanted that.

P.S. I actually quite like the look of Authy the more I read up on it. Yes it is proprietary but it is nice that it has apps that work on a range of devices and has a few features missing from the likes of Google Authenticator. I also feel more comfortable now I read up on "why it is free" https://authy.com/blog/why-is-the-au...ree-for-users/. And no I am not affiliated with them in any way.
 
1 members found this post helpful.
  


Reply

Tags
2fa, slackware



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Set Up Two Factor Auth (2FA) on Your Smartphone & Linux Desktop... now. LXer Syndicated Linux News 0 01-10-2017 08:30 PM
multiple authentication and 2FA genderbender Linux - Software 0 11-01-2012 10:03 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 11:24 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration