News for hackers. Stuff that matters.

A comment on Simple Two-Factor SSH Authentication. Parent comment

Re:Simple Two-Factor SSH Authentication by mentat on Friday September 23, 2011 @12:58PM (#3030672)
What needs to go into trusted_keys?
[ Parent | on HN ]
Re:Simple Two-Factor SSH Authentication by corin_ on Friday September 23, 2011 @03:53PM (#3031345)
Yeah, it is 12. Here is a basic usage guide:

  # groupadd yubikey
  # usermod -G yubikey USERNAME
  # echo "yubikeyid" >> /home/USERNAME/.ssh/trusted_yubikeys
  # (yubikeyid is first 12 characters of the OTP)
  # chmod 755 /usr/local/bin/yubikey.sh
  # (this file is /usr/local/bin/yubikey.sh)
  # echo "Match group yubikey" >> /etc/ssh/sshd_config
  # echo "  ForceCommand /usr/local/bin/yubikey.sh" >> /etc/ssh/sshd_config
  # (that's a tab before ForceCommand)
  # /etc/init.d/ssh restart
[ Parent | on HN ]
Re:Simple Two-Factor SSH Authentication by jaryd on Friday September 23, 2011 @04:31PM (#3031472)
If you're still on CentOS 5.7 you might need to upgrade your openssh package. Might I recommend openssh-5.8.p1 with the HPN patch (http://www.psc.edu/networking/projects/hpn-ssh/#patches)
[ Parent | on HN ]
Re:Simple Two-Factor SSH Authentication by corin_ on Friday September 23, 2011 @06:18PM (#3031782)
Was I ever on CentOS 5.7?
[ Parent | on HN ]
Re:Simple Two-Factor SSH Authentication by mentat on Friday September 23, 2011 @04:08PM (#3031403)
Thank you!
[ Parent | on HN ]
Re:Simple Two-Factor SSH Authentication by corin_ on Friday September 23, 2011 @01:07PM (#3030719)
~/.ssh/trusted_yubikeys ?

It's the I'd of your specific Yubikey - I'm on my phone on a train right now, but off the top of my head it is the first 12 characters that get printed when you use your Yubikey. Pretty sure it's 12, anyway.

[ Parent | on HN ]