authentication methods: how do they work?

2019-03-26 Thread Boris Epstein
Hello listmates, Let's say I have the following configured in my /etc/login.conf auth-defaults:auth=password,skey,yubikey Would that mean either password, or skey, or Yubikey, or should they all be satisifed? Also, is there a way to specify that different users have different requirements as far

Re: authentication methods: how do they work?

2019-03-26 Thread Boris Epstein
1:59 PM Todd C. Miller wrote: > On Tue, 26 Mar 2019 11:11:35 -0400, Daniel Jakots wrote: > > > On Tue, 26 Mar 2019 10:01:59 -0400, Boris Epstein > > wrote: > > > > > Hello listmates, > > > > > > Let's say I have the following configu

Re: authentication methods: how do they work?

2019-03-27 Thread Boris Epstein
On Wed, Mar 27, 2019 at 2:31 AM Ted Unangst wrote: > Boris Epstein wrote: > > Thanks. It makes sense to be able to select login methods under some > > circumstances - but do I have an option of forcing the user to log in > using > > a predetermined set of methods (for ins

Re: authentication methods: how do they work?

2019-03-27 Thread Boris Epstein
On Wed, Mar 27, 2019 at 5:34 AM Boris Epstein wrote: > > > On Wed, Mar 27, 2019 at 2:31 AM Ted Unangst wrote: > >> Boris Epstein wrote: >> > Thanks. It makes sense to be able to select login methods under some >> > circumstances - but do I have an option of

Re: authentication methods: how do they work?

2019-03-27 Thread Boris Epstein
On Wed, Mar 27, 2019 at 11:05 AM Daniel Jakots wrote: > On Wed, 27 Mar 2019 05:34:49 -0400, Boris Epstein > wrote: > > > It is interesting because some people mention combined methods - like > > SSL hostkey + some second factor being used just in that fashion: > > &g