Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:53 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Wed Apr 08, 2015 7:55 pm 
Offline

Joined: Wed Apr 08, 2015 7:48 pm
Posts: 3
Hello,

I'm having problems getting PAM password checks working as my second factor for my OpenVPN auth. The instructions here (for without FreeRadius) include a PAM config file for Redhat based systems:

https://developers.yubico.com/yubico-pa ... a_PAM.html

Here is that config:

Quote:
auth required pam_yubico.so authfile=/etc/yubikeyid id=16 debug
auth include system-auth
account required pam_nologin.so
account include system-auth
password include system-auth
session include system-auth


When I comment out everything but the first line, my VPN connections work fine, but of course authentication works with any password I provide it that precedes my Yubikey OTP. On Debian based systems there isn't a system-auth, but it isn't working with "common-auth" in place of "system-auth" either.

Any feedback on a working Debian-compatible configuration?


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Thu Apr 09, 2015 3:15 pm 
Offline

Joined: Wed Apr 08, 2015 7:48 pm
Posts: 3
Here is my current attempt (which is authenticating my Yubikey but not my system password):

Quote:
auth required pam_yubico.so authfile=/path/to/yubikeys id=22010 debug
auth include common-auth
account required pam_nologin.so
account include common-account
password include common-password
session include common-session


Top
 Profile  
Reply with quote  
PostPosted: Thu Apr 09, 2015 3:48 pm 
Offline

Joined: Wed Apr 08, 2015 7:48 pm
Posts: 3
Figured it out, this works for me:

auth required pam_yubico.so authfile=/path/to/yubikeys id=22010 debug
auth required pam_unix.so try_first_pass debug shadow nodelay
account required pam_unix.so


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group