Page MenuHomeDevCentral

Provision ~/.yubico/authorized_yubikeys files
ClosedPublic

Authored by dereckson on Feb 18 2018, 14:02.
Tags
None
Referenced Files
F24815215: D1332.id3418.diff
Thu, Mar 12, 03:31
F24815214: D1332.id3419.diff
Thu, Mar 12, 03:31
F24815212: D1332.id3417.diff
Thu, Mar 12, 03:31
F24814581: D1332.id3419.diff
Thu, Mar 12, 02:26
F24814580: D1332.id3417.diff
Thu, Mar 12, 02:26
F24809242: D1332.diff
Wed, Mar 11, 17:59
F24803268: D1332.id3418.diff
Wed, Mar 11, 09:35
F24799482: D1332.id3418.diff
Wed, Mar 11, 06:40
Subscribers
None

Details

Summary

If a bastion allows an OTP authentication through yubikeys as PAM module,
it needs to read such keys in ~/.yubico/authorized_yubikeys.

This changes provisions such file through the shellusers pillar entry.

Test Plan
$ cat ~/.yubico/authorized_yubikeys 
dereckson:ccccccbjncrt

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
yubi (branched from master)
Build Status
Buildable 2105
Build 2353: arc lint + arc unit

Event Timeline

dereckson created this revision.

A YubiKey will better expressed as yubico_keys (vendor_artifact) name.

yubi_keys → yubico_keys

This revision is now accepted and ready to land.Feb 18 2018, 14:06
This revision was automatically updated to reflect the committed changes.