Page MenuHomeDevCentral
Differential D1332

Provision ~/.yubico/authorized_yubikeys files
ClosedPublic
Actions

Authored by dereckson on Feb 18 2018, 14:02.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Aug 8, 18:56
Unknown Object (File)
Thu, Aug 7, 17:14
Unknown Object (File)
Thu, Jul 31, 01:31
Unknown Object (File)
Wed, Jul 30, 21:55
Unknown Object (File)
Wed, Jul 30, 18:35
Unknown Object (File)
Wed, Jul 30, 16:16
Unknown Object (File)
Tue, Jul 29, 07:14
Unknown Object (File)
Fri, Jul 25, 19:52
View All Files
Subscribers
None

Details

Reviewers
dereckson
Commits
rOPS56797e259c05: Provision ~/.yubico/authorized_yubikeys files
Summary

If a bastion allows an OTP authentication through yubikeys as PAM module,
it needs to read such keys in ~/.yubico/authorized_yubikeys.

This changes provisions such file through the shellusers pillar entry.

Test Plan
$ cat ~/.yubico/authorized_yubikeys 
dereckson:ccccccbjncrt

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Feb 18 2018, 14:02
dereckson created this revision.
dereckson planned changes to this revision.Feb 18 2018, 14:04

A YubiKey will better expressed as yubico_keys (vendor_artifact) name.

dereckson updated this revision to Diff 3418.Feb 18 2018, 14:05

yubi_keys → yubico_keys

dereckson accepted this revision.Feb 18 2018, 14:06
This revision is now accepted and ready to land.Feb 18 2018, 14:06
Closed by commit rOPS56797e259c05: Provision ~/.yubico/authorized_yubikeys files (authored by dereckson). · Explain WhyFeb 18 2018, 14:06
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathSize
pillar/
core/
2 lines
roles/
bastion/
12 lines
yubico/
24 lines
12 lines

Diff 3419

View Options

pillar/core/users.sls

Loading...
View Options

roles/bastion/init.sls

Loading...
View Options

roles/bastion/yubico/authorized_yubikeys.sls

Loading...
View Options

roles/bastion/yubico/init.sls

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator