[pve-devel] Two-Factor Authentication

[Eric Blevins]

> I think about adding an 'oath' property in /etc/pve/datacenter.cfg
>
> oath: server=server_ip_or_dns_name,type=yubicloud,api_id=...,api_key=...
>
> Should be possible to support different types of validation servers (yubicloud, yubiserve)
>

This looks good

> Are there other important validation server types?
>
Not that I can think of.

Allowing multiple Yubikeys to be associated with a single user would
be a good feature.
I have always used two so if I broke one I am not locked out of
everything I use them with.