{"id":36873,"date":"2019-10-31T22:14:26","date_gmt":"2019-10-31T19:14:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/server-dvuhfaktornoj-avtorizatsii-linotp\/"},"modified":"2019-10-31T22:14:26","modified_gmt":"2019-10-31T19:14:26","slug":"server-dvuhfaktornoj-avtorizatsii-linotp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/server-dvuhfaktornoj-avtorizatsii-linotp","title":{"rendered":"Poslu\u017eitelj dvofaktorske autorizacije LinOTP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Poslu\u017eitelj
\n
\nDanas \u017eelim podijeliti kako podesiti server za dvofaktorsku autentifikaciju, za za\u0161titu korporativne mre\u017ee, web stranica, servisa, ssh. Na serveru \u0107e raditi kombinacija: LinOTP + FreeRadius. <\/p>\n

Za\u0161to nam to treba?
\nTo je u potpunosti besplatno, prakti\u010dno rje\u0161enje unutar vlastite mre\u017ee, nezavisno od vanjskih pru\u017eatelja usluga.<\/p>\n

Ova usluga je vrlo prakti\u010dna, prili\u010dno pregledna, za razliku od drugih open source proizvoda, a tako\u0111er podr\u017eava ogroman broj funkcija i politika (Na primjer, login+password+(PIN+OTPToken)). Integrira se s uslugama za slanje SMS poruka putem API-ja (LinOTP Config->Provider Config->SMS Provider), generira kodove za mobilne aplikacije poput Google Autenticatora i mnogo vi\u0161e. Mislim da je lak\u0161e kori\u0161ten nego usluga o kojoj se razmatra. \u010dlanku<\/a><\/noindex>.<\/p>\n

Ovaj server sjajno radi s Cisco ASA, OpenVPN serverom, Apache2, i uop\u0107e sa svime \u0161to podr\u017eava autentifikaciju putem RADIUS servera (Na primjer, za SSH u data centru).<\/p>\n

Potrebno:<\/p>\n

1 ) Debian 8 (jessie) \u2014 Obavezno!<\/b> (probna instalacija na Debian 9 opisana je na kraju \u010dlanka)<\/p>\n

Po\u010detak:<\/p>\n

Instaliramo Debian 8.
\n<\/a><\/noindex>
\nDodajemo LinOTP repozitorij:<\/p>\n

# echo 'deb http:\/\/www.linotp.org\/apt\/debian jessie linotp' > \/etc\/apt\/sources.list.d\/linotp.list<\/code><\/pre>\n
\nDodajemo klju\u010deve:<\/p>\n
# gpg --search-keys 913DFF12F86258E5<\/code><\/pre>\n
\nPonekad, prilikom \"\u010diste\" instalacije, nakon izvr\u0161enja ove naredbe, Debian prikazuje: <\/p>\n
gpg: napravljen direktorij `\/root\/.gnupg'\ngpg: napravljen novi datoteka s postavkama `\/root\/.gnupg\/gpg.conf'\ngpg: PA\u017dNJA: parametri u `\/root\/.gnupg\/gpg.conf' nisu jo\u0161 aktivni pri ovom pokretanju\ngpg: napravljena tablica klju\u010deva `\/root\/.gnupg\/secring.gpg'\ngpg: napravljena tablica klju\u010deva `\/root\/.gnupg\/pubring.gpg'\ngpg: serveri klju\u010deva nisu postavljeni (koristite --keyserver)\ngpg: gre\u0161ka pri pretra\u017eivanju na serveru klju\u010deva: lo\u0161 URI\n<\/code><\/pre>\n
\nTo je osnovna konfiguracija gnupg. Nema veze. Samo ponovo izvr\u0161ite naredbu.
\nNa pitanje Debiana:<\/p>\n
gpg: pretra\u017eivanje \"913DFF12F86258E5\" na hkp serveru keys.gnupg.net\n(1)\tLSE LinOTP2 Packaging \n\t  2048 bit RSA klju\u010d F86258E5, napravljen: 2010-05-10\nKlju\u010devi 1-1 od 1 za \"913DFF12F86258E5\".  Unesite brojeve, N) Sljede\u0107i ili Q) Izlaz><\/code><\/pre>\n
\nOdgovaramo: 1<\/p>\n
Sljede\u0107e: <\/p>\n
# gpg --export 913DFF12F86258E5 | apt-key add -<\/code><\/pre>\n
<\/p>\n
# apt-get update<\/code><\/pre>\n
\nInstaliramo mysql. U teoriji, mo\u017ee se koristiti drugi sql server, ali \u0107u za jednostavnost koristiti njega, kao preporu\u010deni za LinOTP.<\/p>\n
(dodatne informacije, uklju\u010duju\u0107i rekonstrukciju baze LinOTP, mo\u017eete prona\u0107i u slu\u017ebenoj dokumentaciji) vezi<\/a><\/noindex>. Tamo mo\u017eete prona\u0107i naredbu: dpkg-reconfigure linotp za promjenu parametara ako ste ve\u0107 instalirali mysql).<\/p>\n
# apt-get install mysql-server<\/code><\/pre>\n
<\/p>\n
# apt-get update<\/code><\/pre>\n
 (jo\u0161 jednom provjeriti a\u017euriranja ne bi \u0161kodilo)
\nInstaliramo LinOTP i dodatne module:<\/p>\n
# apt-get install linotp<\/code><\/pre>\n
\nOdgovaramo na pitanja instalatera: 
\nKoristiti Apache2: da
\nSmislite lozinku za admin Linotp: \u201eVa\u0161aLozinka\u201c
\nGenerirati samo-potpisani certifikat?: da
\nKoristiti MySQL?: da
\nGdje se nalazi baza podataka: localhost
\nKreiramo bazu LinOTP (ime baze) na poslu\u017eitelju: LinOTP2
\nKreiramo posebnog korisnika za bazu podataka: LinOTP2
\nPostavljamo lozinku korisniku: \u00abVa\u0161aLozinka\u00bb
\n\u017delite li stvoriti bazu sada? (ne\u0161to poput \u201cJeste li sigurni da \u017eelite …\u201d): da
\nUnosimo root lozinku za MySQL koju smo stvorili prilikom instalacije: \u00abVa\u0161aLozinka\u00bb
\nGotovo.<\/p>\n
(opcionalno, mo\u017ee se i ne staviti)<\/p>\n
# apt-get install linotp-adminclient-cli <\/code><\/pre>\n
\n(opcionalno, mo\u017ee se i ne staviti)<\/p>\n
# apt-get install libpam-linotp  <\/code><\/pre>\n
\nI tako na\u0161 web su\u010delje Linotp sada je dostupno na adresi: <\/p>\n
"<b>https<\\\/b>: \\\\\\\/\\\\\\\/IP_poslu\\u017eitelja\\\\\\\/manage"<\/code><\/pre>\n
\nO postavkama u web su\u010delju \u0107u govoriti malo kasnije.<\/p>\n
Sada, najva\u017enije! Pokre\u0107emo FreeRadius i povezujemo ga s Linotp.<\/p>\n
Instaliramo FreeRadius i modul za rad s LinOTP<\/p>\n
# apt-get install freeradius linotp-freeradius-perl<\/code><\/pre>\n
\nbackupujemo konfiguracije klijenta i korisnika radijusa.<\/p>\n
# mv \/etc\/freeradius\/clients.conf  \/etc\/freeradius\/clients.old<\/code><\/pre>\n
<\/p>\n
# mv \/etc\/freeradius\/users  \/etc\/freeradius\/users.old<\/code><\/pre>\n
\nKreiramo praznu datoteku klijenta:<\/p>\n
# touch \/etc\/freeradius\/clients.conf<\/code><\/pre>\n
\nUre\u0111ujemo na\u0161u novu datoteku konfiguracije (backup konfiguracija mo\u017ee se koristiti kao primjer)<\/p>\n
# nano \/etc\/freeradius\/clients.conf<\/code><\/pre>\n
<\/p>\n
client 192.168.188.0\/24 {\nsecret  = passwd # lozinka za povezivanje klijenata\n}<\/code><\/pre>\n
\nZatim kreiramo datoteku korisnika:<\/p>\n
# touch \/etc\/freeradius\/users<\/code><\/pre>\n
\nUre\u0111ujemo datoteku, govore\u0107i radijusu da \u0107emo koristiti perl za autentifikaciju.<\/p>\n
# nano \/etc\/freeradius\/users<\/code><\/pre>\n
<\/p>\n
DEFAULT Auth-type := perl<\/code><\/pre>\n
\nZatim ure\u0111ujemo datoteku \/etc\/freeradius\/modules\/perl<\/p>\n
# nano \/etc\/freeradius\/modules\/perl<\/code><\/pre>\n
\nMoramo navesti put do perl skripte linotp u parametru module: <\/p>\n
Perl { .......\n.........\nmodule = \/usr\/lib\/linotp\/radius_linotp.pm<\/code><\/pre>\n
\n…..
\nZatim kreiramo datoteku u kojoj navodimo iz kojeg (domena, baze ili datoteke) uzimamo podatke.<\/p>\n
# touch \/etc\/linotp2\/rlm_perl.ini<\/code><\/pre>\n
<\/p>\n
# nano \/etc\/linotp2\/rlm_perl.ini<\/code><\/pre>\n
<\/p>\n
URL=https:\/\/IP_va\u0161eg_LinOTP_poslu\u017eitelja(192.168.X.X)\/validate\/simplecheck\nREALM=webusers1c\nRESCONF=LocalUser\nDebug=True\nSSL_CHECK=False<\/code><\/pre>\n
\nOvdje \u0107u se zadr\u017eati malo detaljnije, budu\u0107i da je to va\u017eno:<\/p>\n
Potpuno opis datoteke s komentarima:
\n#IP of the linotp server (IP \u0430\u0434\u0440\u0435\u0441 \u043d\u0430\u0448\u0435\u0433\u043e LinOTP \u0441\u0435\u0440\u0432\u0435\u0440\u0430)
\nURL=https:\/\/172.17.14.103\/validate\/simplecheck
\n#\u041d\u0430\u0448\u0430 \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0432 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 LinOTP.)
\nREALM=rearm1
\n#\u0418\u043c\u044f \u0433\u0440\u0443\u043f\u043f\u044b \u044e\u0437\u0432\u0435\u0440\u0435\u0439 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0435\u0431\u043c\u043e\u0440\u0434\u0435 LinOTP.
\nRESCONF=flat_file
\n#optional: comment out if everything seems to work fine
\nDebug=True
\n#optional: use this, if you have selfsigned certificates, otherwise comment out (SSL \u0435\u0441\u043b\u0438 \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438 \u0445\u043e\u0442\u0438\u043c \u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c)
\nSSL_CHECK=False<\/p>\n
Zatim \u0107emo kreirati datoteku \/etc\/freeradius\/sites-available\/linotp<\/p>\n
# touch \/etc\/freeradius\/sites-available\/linotp<\/code><\/pre>\n
<\/p>\n
# nano \/etc\/freeradius\/sites-available\/linotp<\/code><\/pre>\n
\nI kopirati \u0107emo u nju konfiguraciju (ne treba ni\u0161ta mijenjati):<\/p>\n
authorize {\n#normalizes malformed client request before handed on to other modules (see '\/etc\/freeradius\/modules\/preprocess')\npreprocess\n#  Ako koristite vi\u0161e vrsta realmova, vjerojatno\n#  \u017eelite postaviti \"ignore_null = yes\" za sve njih.\n#  Ina\u010de, kada prvi stil realm ne odgovara,\n#  ostali stilovi se ne\u0107e provjeriti.\n#omogu\u0107uje listu realmova (see '\/etc\/freeradius\/modules\/realm')\nIPASS\n#razumije ne\u0161to poput USER@REALM i mo\u017ee raspoznati komponente odvojeno (see '\/etc\/freeradius\/modules\/realm')\nsuffix\n#razumije USERREALM i mo\u017ee raspoznati komponente odvojeno (see '\/etc\/freeradius\/modules\/realm')\nntdomain\n#  Pro\u010ditajte 'users' datoteku da biste saznali o posebnoj konfiguraciji koju treba primijeniti za\n# odre\u0111ene korisnike (see '\/etc\/freeradius\/modules\/files')\nfiles\n# omogu\u0107ava ugovor za autentifikaciju (see '\/etc\/freeradius\/modules\/expiration')\nexpiration\n# omogu\u0107ava definiranje valjanih vremenskih usluga (see '\/etc\/freeradius\/modules\/logintime')\nlogintime\n# Nemamo radius_shortname_map!\npap\n}\n#ovdje se linotp perl modul poziva za daljnju obradu\nauthenticate {\nperl\n}<\/code><\/pre>\n
\nZatim \u0107emo napraviti simboli\u010dki link:<\/p>\n
# ln -s ..\/sites-available\/linotp \/etc\/freeradius\/sites-enabled<\/code><\/pre>\n
\nOsobno uklanjam zadane radius web stranice, ali ako su vam potrebne, mo\u017eete ili urediti njihovu konfiguraciju ili ih isklju\u010diti.<\/p>\n
# rm \/etc\/freeradius\/sites-enabled\/default<\/code><\/pre>\n
<\/p>\n
# rm \/etc\/freeradius\/sites-enabled\/inner-tunnel<\/code><\/pre>\n
<\/p>\n
# service freeradius reload<\/code><\/pre>\n
\nSada se vra\u0107amo na web su\u010delje i razmotrit \u0107emo ga malo detaljnije:
\nU gornjem desnom kutu kliknite na LinOTP Config -> UserIdResolvers -> New
\nBiramo \u0161to \u017eelimo: LDAP (AD win, LDAP samba), ili SQL, ili lokalne korisnike sustava Flatfile. <\/p>\n
Ispunjavamo potrebna polja.<\/p>\n
Zatim kreiramo REALMS:
\nU gornjem desnom kutu kliknite na LinOTP Config -> Realms -> New. 
\ni dajemo ime na\u0161em REALMS-u, kao i kliknemo na prethodno kreirani UserIdResolvers.<\/p>\n
Sve ove podatke freeRadiusu trebaju u datoteci \/etc\/linotp2\/rlm_perl.ini, o \u010demu sam pisao ranije, pa ako niste uredili tada, u\u010dinite to sada.<\/p>\n
Svi serveri su postavljeni.<\/p>\n
Dodatak:<\/p>\n
Postavljanje LinOTP na Debian 9<\/b>:<\/p>\n
Instalacija: <\/p>\n
# echo 'deb http:\/\/linotp.org\/apt\/debian stretch linotp' > \/etc\/apt\/sources.list.d\/linotp.list <\/code><\/pre>\n
# apt-get install dirmngr<\/code><\/pre>\n
<\/p>\n
# apt-key adv --recv-keys 913DFF12F86258E5\n<\/code><\/pre>\n
# apt-get update<\/code><\/pre>\n
<\/p>\n
# apt-get install mysql-server<\/code><\/pre>\n
 (po zadano, u Debianu 9 mysql (mariaDB) ne nudi postavljanje root lozinke, naravno, mo\u017eete je ostaviti praznom, ali ako \u010ditate vijesti, to \u010desto dovodi do \"epic faila\", pa \u0107emo je ipak postaviti)<\/p>\n
# mysql -u root -p<\/code><\/pre>\n
use mysql;<\/code><\/pre>\n
UPDATE user SET Password = PASSWORD('tu_lozinku') WHERE User = 'root';\n<\/code><\/pre>\n
exit<\/code><\/pre>\n
# apt-get install linotp<\/code><\/pre>\n
# apt-get install linotp-adminclient-cli<\/code><\/pre>\n
# apt-get install python-ldap<\/code><\/pre>\n
# apt install freeradius<\/code><\/pre>\n
# nano \/etc\/freeradius\/3.0\/sites-enabled\/linotp<\/code><\/pre>\n
Ubacujemo kod (poslao JuriM, hvala mu!):<\/p>\n
server linotp {
\nlisten {
\n ipaddr = *
\n port = 1812
\n type = auth
\n}
\nlisten {
\n ipaddr = *
\n port = 1813
\n type = acct
\n}
\nauthorize { 
\n preprocess
\n update { 
\n &control:Auth-Type := Perl
\n } 
\n} 
\nauthenticate {
\n Auth-Type Perl {
\n perl
\n }
\n}
\naccounting {
\n unix
\n}
\n}<\/p><\/blockquote>\n
Uredite \/etc\/freeradius\/3.0\/mods-enabled\/perl<\/p>\n
perl {
\n filename = \/usr\/share\/linotp\/radius_linotp.pm
\n func_authenticate = authenticate
\n func_authorize = authorize
\n}<\/p><\/blockquote>\n
Na\u017ealost u debian 9 biblioteka radius_linotp.pm se ne instalira iz repozitorija, pa \u0107emo je uzeti s githuba.<\/p>\n
# apt install git<\/code><\/pre>\n
# git clone https:\/\/github.com\/LinOTP\/linotp-auth-freeradius-perl<\/code><\/pre>\n
# cd linotp-auth-freeradius-perl\/<\/code><\/pre>\n
# cp radius_linotp.pm \/usr\/share\/linotp\/radius_linotp.pm<\/code><\/pre>\n
sada \u0107emo ispraviti \/etc\/freeradius\/3.0\/clients.conf <\/p>\n
client servers {
\n ipaddr = 192.168.188.0\/24
\n secret = va\u0161alozinka
\n}<\/p><\/blockquote>\n
sada \u0107emo ispraviti nano \/etc\/linotp2\/rlm_perl.ini<\/p>\n
Ubacite tamo isti kod kao pri instalaciji na debian 8 (opisano ranije)<\/p>\n
teoretski, to je to. (jo\u0161 nije testirano)<\/p>\n
Ostavit \u0107u nekoliko poveznica o postavljanju sustava koje se naj\u010de\u0161\u0107e trebaju za\u0161tititi dvofaktorskom autentifikacijom: 
\nPostavljanje dvofaktorske autentifikacije u Apache2<\/a><\/noindex><\/p>\n
Postavljanje s Cisco ASA<\/a><\/noindex>(tamo se koristi drugi server za generiranje tokena, ali postavke same ASA su iste).<\/p>\n
VPN s dvofaktorskom autentifikacijom<\/a><\/noindex><\/p>\n
Pode\u0161avanje dvofaktorska autentifikacija u ssh<\/a><\/noindex> (tamo se tako\u0111er koristi LinOTP) \u2014 hvala autoru. Tamo se tako\u0111er mogu prona\u0107i zanimljive stvari o postavljanju politika LiOTP.<\/p>\n
Tako\u0111er, cms mnogih web stranica podr\u017eavaju dvofaktorsku autentifikaciju (za WordPress LinOTP \u010dak ima svoj specijalni modul na github<\/a><\/noindex>), na primjer, ako \u017eelite na svom korporativnom web mjestu napraviti za\u0161ti\u0107eni odjeljak za zaposlenike kompanije.
\nVA\u017dNA \u010cINJENICA! NE stavljajte kva\u010dicu za \u201eGoogle autenteficator\u201c ako koristite Google autentifikator! QR kod se tada ne mo\u017ee pro\u010ditati\u2026 (\u010dudna \u010dinjenica)<\/p>\n
Za pisanje \u010dlanka kori\u0161tene su informacije iz sljede\u0107ih \u010dlanaka:
\nitnan.ru\/post.php?c=1&p=270571<\/a><\/noindex>
\nwww.digitalbears.net\/?p=469<\/a><\/noindex> <\/p>\n
Hvala autorima.
\n
Izvor: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0441\u0430\u0439\u0442\u043e\u0432, \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432,ssh. \u041d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u0432\u044f\u0437\u043a\u0430: LinOTP + FreeRadius. \u0417\u0430\u0447\u0435\u043c \u043e\u043d \u043d\u0430\u043c? \u042d\u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0435, \u0443\u0434\u043e\u0431\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435, \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438, \u043d\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0449\u0435\u0435 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432. \u0414\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0432\u0435\u0441\u044c\u043c\u0430 \u0443\u0434\u043e\u0431\u0435\u043d, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0430\u0433\u043b\u044f\u0434\u0435\u043d, \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0438 \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a \u0436\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27627,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36873","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Server za dvostruku autentifikaciju LinOTP | ProHoster","description":"Danas \u017eelim podijeliti kako konfigurirati server.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/server-dvuhfaktornoj-avtorizatsii-linotp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0435\u0440\u0432\u0435\u0440 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 LinOTP | ProHoster","og:description":"\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0445\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f, \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/server-dvuhfaktornoj-avtorizatsii-linotp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:26+00:00","article:modified_time":"2019-10-31T19:14:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36873","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:08:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:23","updated":"2026-01-22 05:08:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/36873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=36873"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/36873\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/27627"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=36873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=36873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=36873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}