1

Topic: [Feature request] 2FA/MFA

Hi,

After a brief search I got nothing, so apologies if this is answered already, but are there any plans/ideas about introducing two-factor authentication into the various authentication elements of iRedMail. I appreciate some things, such as IMAP/SMTP auth, are a bit more difficult to get right than, say, web consoles, but it seems like a good idea.

I look after a couple of pro-licensed servers if it's more of a pro feature, but due to them being in production, wouldn't be able to provide any testing earlier than beta or release candidate, unfortunately.

Regards,
Steve.

2

Re: [Feature request] 2FA/MFA

We have no plan to offer 2-factor authentication.

*) If you need this for webmail, it's better to ask in Roundcube or SOGo mailing list.
*) For SMTP service, ask in Postfix mailing list.
*) For IMAP/POP3 service, ask in Dovecot mailing list.

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

3

Re: [Feature request] 2FA/MFA

OK, if I get something working I'll post here so it can be Wiki'd or maybe integrated in the future.

Thanks,
Steve.

4

Re: [Feature request] 2FA/MFA

I would look at doing this in the Nginx/Apache level (if possible).

That wouldn't truly be using 2FA for a single application. Rather it would be first authenticating to Nginx, which then allows you to talk to the underlying web app so you can authenticate to it. The bad guys would have to break through two completely separate security systems.

There are good tutorials for Nginx as a reverse proxy. It's a lot easier to use for that than Apache. I'm still quite new to Nginx however, so anything I say about Nginx should be viewed with caution.

5

Re: [Feature request] 2FA/MFA

It's now 2019 and 2FA is more than needed now. What are the plans here?
Please have in mind that it could be, that in the EU it may become law in the near future to provide 2FA (see the plans for extending the DSGVO).

6

Re: [Feature request] 2FA/MFA

- For Roundcube, there's a plugin for this.
- For iRedAdmin-Pro, we have it on todo list, but not so high priority right now.

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee