a Thrift daemon for validating Google Authenticator tokens
a Ruby client
an example client
It is easy to create a client in any language supported by Apache Thrift.
Assuming google-authenticator is setup, as root:
bin/ga-verifyd & chmod 777 /var/run/ga_verifyd.sock
Then as an unprivileged user:
bin/ga-verify fred 123456
bin/ga-verify is a small example client.
git clone git://github.com/fredemmott/ga-verify.git
gem install ga_verify
The main goal of this is to make it so that google authenticator tokens can be checked by untrusted processes, without having to give them permission to read the google authenticator files.
1 token past or previous is allowed
Tokens can not be re-used within 10 minutes - after that amount of time, they would be invalid anyway
It currently only supports running on a unix socket, not TCP
It merely checks the code is valid given the above constraints. It does not currently use Google's PAM implementation, so it supports none of the following:
per-user retry and re-use settings
See the COPYING file.