Page MenuHomeDevCentral
Differential D1332

Provision ~/.yubico/authorized_yubikeys files
ClosedPublic
Actions

Authored by dereckson on Feb 18 2018, 14:02.
Tags
None
Referenced Files
F11083271: D1332.id3418.diff
Wed, Aug 13, 18:33
F11082015: D1332.id3417.diff
Wed, Aug 13, 15:47
F11081236: D1332.id3419.diff
Wed, Aug 13, 14:04
Unknown Object (File)
Wed, Aug 13, 04:57
Unknown Object (File)
Wed, Aug 13, 00:45
Unknown Object (File)
Wed, Aug 13, 00:17
Unknown Object (File)
Tue, Aug 12, 21:25
Unknown Object (File)
Fri, Aug 8, 18:56
View All Files
Subscribers
None

Details

Reviewers
dereckson
Commits
rOPS56797e259c05: Provision ~/.yubico/authorized_yubikeys files
Summary

If a bastion allows an OTP authentication through yubikeys as PAM module,
it needs to read such keys in ~/.yubico/authorized_yubikeys.

This changes provisions such file through the shellusers pillar entry.

Test Plan
$ cat ~/.yubico/authorized_yubikeys 
dereckson:ccccccbjncrt

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
yubi (branched from master)
Build Status
Buildable 2104
Build 2352: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Feb 18 2018, 14:02
dereckson created this revision.
dereckson planned changes to this revision.Feb 18 2018, 14:04

A YubiKey will better expressed as yubico_keys (vendor_artifact) name.

dereckson updated this revision to Diff 3418.Feb 18 2018, 14:05

yubi_keys → yubico_keys

dereckson accepted this revision.Feb 18 2018, 14:06
This revision is now accepted and ready to land.Feb 18 2018, 14:06
Closed by commit rOPS56797e259c05: Provision ~/.yubico/authorized_yubikeys files (authored by dereckson). · Explain WhyFeb 18 2018, 14:06
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathSize
pillar/
core/
2 lines
roles/
bastion/
12 lines
yubico/
24 lines
12 lines

Diff 3417

View Options

pillar/core/users.sls

Loading...
View Options

roles/bastion/init.sls

Loading...
View Options

roles/bastion/yubico/authorized_yubikeys.sls

Loading...
View Options

roles/bastion/yubico/init.sls

Loading...
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator