[QUESTION] Linux root access with challenge-response

2017-03-30T13:54:17+01:00

Hello,

I want to configure our Linux systems so, that if a root access established (ssh, su, console) challenge-response is used.
If any other user want to access the system by anyway, only password is required.
My idea is to use a script instead of "/bin/bash" entry in "/etc/passwd".

I found https://github.com/ThomasHabets/ychares which gives me the the same response(with a little change in source) as yubikey-personalization-gui. But how can I handle this response with login/PAM?
Or is there a other solution to do this?

Thanks

Frank

Statistics: Posted by fme — Thu Mar 30, 2017 1:54 pm

Yubico Forum

[QUESTION] Linux root access with challenge-response