Support Duo Security two-factor authentication for local user database
We have started evaluating Duo Security, starting with the duo-unix PAM module package.
It would be extremely useful to be able to deploy this, especially in mass provisioned or vastly distributed/remote setups.
The CEO of Duo has expressed an interest in supporting pfSense, however the lack of a ready-made SDK image may be a potential blocker to get 3rd party integration like this rolling.
(I'll raise plugins/services e.g. OpenVPN as separate issues to track progress -- I have managed to use pam_yubico with OpenVPN, however this is undesirable for many reasons.)