Yubico Forum
https://forum.yubico.com/

[QUESTION] PAM Konfig Proxy and https
https://forum.yubico.com/viewtopic.php?f=23&t=2286
Page 1 of 1

Author:  asshep [ Thu Apr 21, 2016 9:16 am ]
Post subject:  [QUESTION] PAM Konfig Proxy and https

pam-yubico.so uses curl in the background for resolving authentication from yubico Server

1. Behind Firewall I have to Configure Proxy Server
- proxy=http://<proxy_server>:<proxy_port>
this works only with newer Versions auf pam-yubico v2.21 ( see source/NEWS / for me OK )

2. If no url= or urllist= parameters are specified, pam-yubico uses https (SSL) to connect
- Certificate of api.yubico.com is selfsigned, curl is unable to find a chain, so connect is denied and authentication failed

- How can I make curl been invoked with option --unsecure
- or where I can get an proper cacerts File from
- or other way to setup pam-yubico without url= or urllist= Parameters ( because URL may change, at this Moment it is api1 - api5. which shall i Use ? dosn't matter ? )
- where can I get the urllist from ( ykclient_set_url_bases I don't understand. Its a Programm ? Function Call ? )

at this Moment this works for me

auth required pam_yubico.so id=****** proxy=http://x.x.x.x:8080 url=http://api5.yubico.com/wsapi/2.0/verify?id=%d&otp=%s

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/