Tool to do Multi-Factor Authentication (MFA) in CLI.

• OS X, Linux
• Python 3.x

1. Download PC.

   $ git clone git@github.com:tkibe/mfa.git ~/bin/mfa

2. Install the Python packages CLI as follows:

   $ cd ~/bin/mfa
   $ pip install -r requirements.txt

   Note: If you're having permission issues on your system installing the CLI, please try the following command:

   $ sudo pip install -r requirements.txt

3. Simply setting the "MFA" name and secret. (YAML format)

   This example defines a key "Demo MFA 1" with value MFA secret key, a key "Demo MFA 2" with value MFA secret key that is itself set of key/value pairs.
   To encrypt a key/value pairs, use "ansible-vault" to set a password.

   e.g.)
   $ echo "Demo MFA 1: z7EKrWNx2T86FcLrNyiRKSnXVawe8kHx" >> demo/example.yml
   $ echo "Demo MFA 2: jJNHhNBYujPFhKt4c3MC7Sk7QuTd53S8" >> demo/example.yml
   $ ansible-vault encrypt demo/example.yml
   New Vault password:
   Confirm New Vault password:

4. To run this tool, you need to set valid environment variable "MFA_FILE" beforehand.

   e.g.)
   $ export MFA_FILE=~/bin/mfa/demo/example.yml

5. Can be executed when the setting is completed.

   Enter the password you have set for "ansible-vault" and you will see the one-time password.

   $ python ~/bin/mfa/mfa/main.py
   Vault password:
   +---------------+--------+
   |     Name      |  Code  |
   +===============+========+
   | Example MFA 1 | xxxxxx |
   +---------------+--------+
   | Example MFA 2 | xxxxxx |
   +---------------+--------+

   It also feasible to narrow down the list.

   e.g.)
   $ python ~/bin/mfa/mfa/main.py | grep "1"
   Vault password:
   | Demo MFA 1  | xxxxxx |
   $ python ~/bin/mfa/mfa/main.py | grep "2"
   Vault password:
   | Demo MFA 2  | xxxxxx |

If you want to use it permanently, add the setting to ~/.bash_profile.

$ echo "export MFA_FILE=~/bin/mfa/auth.yml" >> ~/.bash_profile
$ echo 'alias mfa="python ~/bin/mfa/mfa/main.py"' >> ~/.bash_profile
$ echo "<Your secret key>: xxxxxxxxxx" >> ~/bin/mfa/auth.yml