André Rodier <[email protected]> writes: > Hello Kamil, > > This is not exactly what I asked. > > I want two factors authentication, with the first factor (the > password) and the second one being one of many (Yubikey, google auth > or u2f)
Please do not top post. One thing: what do you mean "yubikey" in this context? Yubikey (at least 5 which I own) have some "applications" and can act as u2f key or generate codes compatible with google auth (I least I was able to use it as a replacement for google auth). Or you mean its own challenge-response protocol? And if I understand you correctly you should: 1. verify if there are pam modules (at least for u2f and yubico answer is "yes") 2. and probably use substack (http://linux-pam.org/Linux-PAM-html/sag-configuration-file.html) but, honestly I did tested it. KJ > > Thanks, > > On 13/11/2021 18:13, Kamil Jońca wrote: >> André Rodier <[email protected]> writes: >> >>> Hello all, >>> >>> I can use various second factors authentications on Debian: >>> >>> - google authenticator >>> - u2f key >>> - yubikey >>> >>> I would like to configure pam sessions to have 1) password >>> authentication, and then 2) one of the second factor described above. >>> >>> How this can be achieved, please ? >>> >>> Thanks for your answers. >>> >>> André Rodier. >>> >> Well. >> I can say that I follow: >> https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F >> and I can use my ubikey (I believe its u2f application) to login/unlock. >> >> KJ >> -- http://wolnelektury.pl/wesprzyj/teraz/
