Re: PAM two factors authentication
On Sun, 14 Nov 2021 07:19:21 + (UTC) André Rodier wrote: > > 14 Nov 2021 00:55:25 Celejar : > > > On Sat, 13 Nov 2021 19:13:27 +0100 > > Kamil Jońca wrote: > > > >> André Rodier writes: > >> > >>> Hello all, > >>> > >>> I can use various second factors authentications on Debian: > >>> > >>> - google authenticator > >>> - u2f key > >>> - yubikey > >>> > >>> I would like to configure pam sessions to have 1) password > >>> authentication, and then 2) one of the second factor described above. > >>> > >>> How this can be achieved, please ? > >>> > >>> Thanks for your answers. > >>> > >>> André Rodier. > >>> > >> > >> Well. > >> I can say that I follow: > >> https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F > >> and I can use my ubikey (I believe its u2f application) to login/unlock. > > > > And see: > > > > https://wiki.debian.org/Security/U2F > > > > (I've written bits of that page.) > > > >> KJ > > > > Celejar > Thanks for the link, but I don't think this is answering my question. > > Could you double check what I asked, please and confirm ? Back at you: could you please double check that your question is clear and easily understandable? > Thanks, Celejar
Re: PAM two factors authentication
Kamil Jońca writes: > 2. and probably use substack > (http://linux-pam.org/Linux-PAM-html/sag-configuration-file.html) but, > honestly I did tested it. > KJ Should be "I did NOT tested it" :( Sorry. KJ -- http://stopstopnop.pl/stop_stopnop.pl_o_nas.html
Re: PAM two factors authentication
On Sat, 13 Nov 2021 19:13:27 +0100 Kamil Jońca wrote: > André Rodier writes: > > > Hello all, > > > > I can use various second factors authentications on Debian: > > > > - google authenticator > > - u2f key > > - yubikey > > > > I would like to configure pam sessions to have 1) password > > authentication, and then 2) one of the second factor described above. > > > > How this can be achieved, please ? > > > > Thanks for your answers. > > > > André Rodier. > > > > Well. > I can say that I follow: > https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F > and I can use my ubikey (I believe its u2f application) to login/unlock. And see: https://wiki.debian.org/Security/U2F (I've written bits of that page.) > KJ Celejar
Re: PAM two factors authentication
André Rodier writes: > Hello Kamil, > > This is not exactly what I asked. > > I want two factors authentication, with the first factor (the > password) and the second one being one of many (Yubikey, google auth > or u2f) Please do not top post. One thing: what do you mean "yubikey" in this context? Yubikey (at least 5 which I own) have some "applications" and can act as u2f key or generate codes compatible with google auth (I least I was able to use it as a replacement for google auth). Or you mean its own challenge-response protocol? And if I understand you correctly you should: 1. verify if there are pam modules (at least for u2f and yubico answer is "yes") 2. and probably use substack (http://linux-pam.org/Linux-PAM-html/sag-configuration-file.html) but, honestly I did tested it. KJ > > Thanks, > > On 13/11/2021 18:13, Kamil Jońca wrote: >> André Rodier writes: >> >>> Hello all, >>> >>> I can use various second factors authentications on Debian: >>> >>> - google authenticator >>> - u2f key >>> - yubikey >>> >>> I would like to configure pam sessions to have 1) password >>> authentication, and then 2) one of the second factor described above. >>> >>> How this can be achieved, please ? >>> >>> Thanks for your answers. >>> >>> André Rodier. >>> >> Well. >> I can say that I follow: >> https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F >> and I can use my ubikey (I believe its u2f application) to login/unlock. >> >> KJ >> -- http://wolnelektury.pl/wesprzyj/teraz/
Re: PAM two factors authentication
Hello Kamil, This is not exactly what I asked. I want two factors authentication, with the first factor (the password) and the second one being one of many (Yubikey, google auth or u2f) Thanks, On 13/11/2021 18:13, Kamil Jońca wrote: André Rodier writes: Hello all, I can use various second factors authentications on Debian: - google authenticator - u2f key - yubikey I would like to configure pam sessions to have 1) password authentication, and then 2) one of the second factor described above. How this can be achieved, please ? Thanks for your answers. André Rodier. Well. I can say that I follow: https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F and I can use my ubikey (I believe its u2f application) to login/unlock. KJ -- 𝓐𝓡 - André Rodier
Re: PAM two factors authentication
André Rodier writes: > Hello all, > > I can use various second factors authentications on Debian: > > - google authenticator > - u2f key > - yubikey > > I would like to configure pam sessions to have 1) password > authentication, and then 2) one of the second factor described above. > > How this can be achieved, please ? > > Thanks for your answers. > > André Rodier. > Well. I can say that I follow: https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F and I can use my ubikey (I believe its u2f application) to login/unlock. KJ -- http://wolnelektury.pl/wesprzyj/teraz/
PAM two factors authentication
Hello all, I can use various second factors authentications on Debian: - google authenticator - u2f key - yubikey I would like to configure pam sessions to have 1) password authentication, and then 2) one of the second factor described above. How this can be achieved, please ? Thanks for your answers. André Rodier.
