Re: PAM two factors authentication

[Kamil Jońca <kjonca@o2.pl>]

André Rodier <andre@rodier.me> writes:

> Hello Kamil,
>
> This is not exactly what I asked.
>
> I want two factors authentication, with the first factor (the
> password) and the second one being one of many (Yubikey, google auth
> or u2f)

Please do not top post.
One thing: what do you mean "yubikey" in this context?
Yubikey (at least 5 which I own) have some "applications" and can act as
u2f key or generate codes compatible with google auth (I least I was
able to use it as a replacement for google auth).
Or you mean its own challenge-response protocol?
And if I understand you correctly you should:
1. verify if there are pam modules (at least for u2f and yubico answer
is "yes")
2. and probably use substack
(http://linux-pam.org/Linux-PAM-html/sag-configuration-file.html) but,
honestly I did tested it.
KJ



>
> Thanks,
>
> On 13/11/2021 18:13, Kamil Jońca wrote:
>> André Rodier <andre@rodier.me> writes:
>> 
>>> Hello all,
>>>
>>> I can use various second factors authentications on Debian:
>>>
>>> - google authenticator
>>> - u2f key
>>> - yubikey
>>>
>>> I would like to configure pam sessions to have 1) password
>>> authentication, and then 2) one of the second factor described above.
>>>
>>> How this can be achieved, please ?
>>>
>>> Thanks for your answers.
>>>
>>> André Rodier.
>>>
>> Well.
>> I can say that I follow:
>> https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F
>> and I can use my ubikey (I believe its u2f application) to login/unlock.
>> 
>> KJ
>> 

-- 
http://wolnelektury.pl/wesprzyj/teraz/