Yubico Forum

Re: Login with Yubikey on Debian GNU/Linux

2013-02-04T11:29:56+01:00

I have made some tests, and I can't use the required statement in my PAM configuration since I am stuck out of the laptop.
Indeed if I put required, the password nor the yubikey are granted.
I can only make it sufficient, and in this case I am using One-factor authentication (password or yubikey) which I don't want.
Do you know how to enable 2 factors authentication for local login ?

Statistics: Posted by moulip — Mon Feb 04, 2013 11:29 am

Re: Login with Yubikey on Debian GNU/Linux

2013-01-29T16:26:19+01:00

Actually I am using it the way it is when supplied.
I have not changed anything. I think it is working in OTP.
And It is working because I am prompted the yubikey field and when I press the button I am connected.
Furthermore the links you gave me are for SSH connections and I am looking for performing local connections.

Statistics: Posted by moulip — Tue Jan 29, 2013 4:26 pm

Re: Login with Yubikey on Debian GNU/Linux

2013-01-29T15:20:20+01:00

That's why you should look at PAM configuration.

You probably are falling back to normal username and password if the Yubikey fails.

Are you using the Yubikey in challenge-response mode?

Statistics: Posted by Tom — Tue Jan 29, 2013 3:20 pm

Re: Login with Yubikey on Debian GNU/Linux

2013-01-29T14:52:07+01:00

thank you for your answer.
I think PAM is well configured. But What I'd wish was to make the login impossible if the yubikey was not present.
And in this case, if the Yubikey is not present, I can still login with password.

Statistics: Posted by moulip — Tue Jan 29, 2013 2:52 pm

Re: Login with Yubikey on Debian GNU/Linux

2013-01-29T09:12:47+01:00

Hello Moulip,

it sounds like you did not configured correctly PAM.

Please have a look at those links:

https://www.berrange.com/posts/2011/12/ ... -together/

or

viewtopic.php?f=16&t=822

Statistics: Posted by Tom — Tue Jan 29, 2013 9:12 am

Login with Yubikey on Debian GNU/Linux

2013-01-28T15:14:46+01:00

Hi all,

I have just setup my yubikey in order to login my Laptop under Debian. It is working but something is strange.
When I reach the login page, I am prompted with the yubikey field. If I press the button I am logged in.
But If I enter my password instead, I am asked the password a second time and them I am logged in. I'd like to make the yubikey mandatory, so that if it is not present, I can't login on my laptop.

Do you know how I can do ?

Statistics: Posted by moulip — Mon Jan 28, 2013 3:14 pm