Yubico Forum ...visit our web-store at 2008-09-02T10:25:37+01:00 https://forum.yubico.com/feed.php?f=5&t=149 2008-09-02T10:25:37+01:00 2008-09-02T10:25:37+01:00 https://forum.yubico.com/viewtopic.php?t=149&p=624#p624 <![CDATA[Re: Yubikey as a Two-factor legacy Username + password + Yubikey]]>
/Simon

Statistics: Posted by Simon — Tue Sep 02, 2008 10:25 am

]]> 2008-07-25T22:22:00+01:00 2008-07-25T22:22:00+01:00 https://forum.yubico.com/viewtopic.php?t=149&p=492#p492 <![CDATA[Yubikey as a Two-factor legacy Username + password + Yubikey]]>
This is taken from http://code.google.com/p/yubico-pam/issues/detail?id=7

Quote:

Reported by timm.tem, May 08, 2008
Simon
It would be great if we could use the Yubikey to do Two-factor legacy
Username + password + YubiKey in exactly the same fashion it works on the
website http://www.yubico.com/demo/index.php.
As currently with the way PAM works anyone who has my key can login to my
server
Thank you
Tim

Comment 1 by dion.rowney, Jun 09, 2008
I am currently try to work on this, however I find myself bringing in the entire
pam_unix module... Is there a better way to avoid code duplication?
Or can my pam_yubico module call the pam_unix module from within?

Comment 2 by kittypee, Jun 13, 2008
This can be done simply by stacking the pam modules separately.
auth required pam_unix.so ...
auth required pam_yubikey.so ...
This causes pam to require both modules to be run, and both must pass. Although this solution again would
require that bug #4 be fixed.

Comment 3 by dion.rowney, Jun 16, 2008
It seems that ssh only will prompt for a password regardless and does not give
multiple methods.


kittypee says that you can stack pam modules which does prompt for Yubikey and Password but putty fails saying Network Error: Software causes connection abort

The extract from my /etc/pam.d/ssh

Code:
auth       required     pam_yubico.so id=16 debug
auth       required     pam_env.so # [1]
auth       required     pam_env.so envfile=/etc/default/locale


Any help again would be greatfully appreciated

Thank you again in advanced

Tim

Statistics: Posted by timm_tem — Fri Jul 25, 2008 10:22 pm

]]>