Bug 694804

Summary: FutureFeature Add Google Authenticator PAM for SSO support
Product: [Fedora] Fedora Reporter: rhbugs <rhbugs>
Component: distributionAssignee: Bill Nottingham <notting>
Status: CLOSED NOTABUG QA Contact: Bill Nottingham <notting>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: dcantrell, elad, rvokal
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-04-26 16:01:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description rhbugs@greebo.org 2011-04-08 13:29:35 UTC 
Description of problem:
FutureFeature

Google Authenticator (http://code.google.com/p/google-authenticator/) provides a PAM which permits use of time-based or sequential single sign on passwords.  Agents to generate passwords based on a secret key are freely available for common smart phone platforms.

Some users are already compiling this on their own, but lack the experience to build appropriate SELinux policies to support it.  As such, some are disabling SELinux (see comments at http://code.google.com/p/google-authenticator/wiki/PamModuleInstructions) or creating excessively broad rules to support it locally.

An official Fedora package with accompanying SELinux rules and optional script to simplify selection of applications to use this PAM would help to provide Fedora (and eventually RHEL) customers with an inexpensive SSO solution that would significantly improve system security.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:
Comment 1 Elad Alfassa 2011-04-26 16:01:24 UTC 
Sorry, this is not the correct way of requesting packages. 
You can add it to the wishlist, https://fedoraproject.org/wiki/PackageMaintainers/WishList
Then you should wait.
There are two ways to speed up this process:
1) Make the package yourself, submit it for review
2) Convince a packager to create a package for this application.