Page MenuHomeDevCentral

Provision ~/.yubico/authorized_yubikeys files
ClosedPublic

Authored by dereckson on Feb 18 2018, 14:02.
Tags
None
Referenced Files
F24388333: D1332.diff
Tue, Feb 17, 23:09
F24387689: D1332.diff
Tue, Feb 17, 21:31
F24387029: D1332.diff
Tue, Feb 17, 19:54
F24386378: D1332.diff
Tue, Feb 17, 18:08
Unknown Object (File)
Sun, Feb 8, 05:16
Unknown Object (File)
Wed, Feb 4, 22:08
Unknown Object (File)
Mon, Feb 2, 07:51
Unknown Object (File)
Sat, Jan 31, 16:58
Subscribers
None

Details

Summary

If a bastion allows an OTP authentication through yubikeys as PAM module,
it needs to read such keys in ~/.yubico/authorized_yubikeys.

This changes provisions such file through the shellusers pillar entry.

Test Plan
$ cat ~/.yubico/authorized_yubikeys 
dereckson:ccccccbjncrt

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson created this revision.

A YubiKey will better expressed as yubico_keys (vendor_artifact) name.

yubi_keys → yubico_keys

This revision is now accepted and ready to land.Feb 18 2018, 14:06
This revision was automatically updated to reflect the committed changes.