Yubico Forum

Hello,

I'm having problems getting PAM password checks working as my second factor for my OpenVPN auth. The instructions here (for without FreeRadius) include a PAM config file for Redhat based systems:

https://developers.yubico.com/yubico-pa ... a_PAM.html

Here is that config:



When I comment out everything but the first line, my VPN connections work fine, but of course authentication works with any password I provide it that precedes my Yubikey OTP. On Debian based systems there isn't a system-auth, but it isn't working with "common-auth" in place of "system-auth" either.

Any feedback on a working Debian-compatible configuration?

Here is my current attempt (which is authenticating my Yubikey but not my system password):

Figured it out, this works for me:

auth required pam_yubico.so authfile=/path/to/yubikeys id=22010 debug
auth required pam_unix.so try_first_pass debug shadow nodelay
account required pam_unix.so