On Tue, Oct 25, 2011 at 6:22 PM, Toshio Kuratomi <a.badger(a)gmail.com> wrote:
Correct -- it's not currently two-factor (it's either this or
that). We've
been kicking around whether we want to make it two-factor, how we'd do that,
who we'd enforce it upon, etc, for a while... it's hard because we have
several different classes of users with different requirements for each.
Maybe something like SAML or OpenID 2.0 would be a solution for this
(free single sign on included)... The people @yubikey wrote a module
for simpleSAMLphp to support the Yubikey for 2-factor authentication.
Would be nice to have single sign on for Bugzilla, FAS, Bodhi, Wiki...
Regards,
François