Yubico Forum
https://forum.yubico.com/

SCP command does not working with yubikey
https://forum.yubico.com/viewtopic.php?f=29&t=1072
Page 1 of 1

Author:  rambeats [ Thu May 23, 2013 1:46 pm ]
Post subject:  SCP command does not working with yubikey

Hi,

I have configured ssh login to my remote server using publickey and yubikey together. It worked without any issue, but the scp command not functioning. It keeps struck on the command line and there is no password prompt or any other error message. Somebody please help me to resolve this issue.

Thanks
rambeats

Author:  Tom [ Thu May 23, 2013 2:06 pm ]
Post subject:  Re: SCP command does not working with yubikey

Did you checked this?
https://www.crc.id.au/2012/10/24/ssh-tw ... y-ssh-key/

Author:  rambeats [ Thu May 23, 2013 4:55 pm ]
Post subject:  Re: SCP command does not working with yubikey

Tom,

I had tried that way but it didn't work ssh with yubikey for me. There were some issues with RequiredAuthentications2 in ssh configuration.

Below link helped me to get ssh authentication with publickey and yubikey together, but the issue is only with scp.
https://www.berrange.com/posts/2011/12/ ... -together/

Do you have any idea?

Thanks
rambeats

Author:  djdicbob [ Sat Jun 01, 2013 11:24 pm ]
Post subject:  Re: SCP command does not working with yubikey

The link you posted is an older way to config sshd. Depending on your version of sshd, you should be able to set these config directives and get rid of the ForceCommand directive.

/etc/pam.d/ssh:
Add yubico module
Remove/comment line "auth include password-auth"

Code:
#%PAM-1.0
auth       required pam_sepermit.so
auth       sufficient     pam_yubico.so id=N authfile=/etc/sysconfig/yubikey

#auth include password-auth


/etc/sshd/sshd_config:
Ensure these directive are set. Shouldn't clash with most other sshd directives.

Code:
Protocol 2
RequiredAuthentications2 publickey,keyboard-interactive
ChallengeResponseAuthentication yes
UsePAM yes


My output looks like this

Code:
[root@admin1a.domain ~]$ scp RHEL-6.2-x86_64-kvm.cfg admin1b.domain:
Authenticated with partial success.
Yubikey for `root':
RHEL-6.2-x86_64-kvm.cfg             100% 1460     1.4KB/s   00:00

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/