rooty/yubico-pam
1
0
Fork 0
mirror of https://github.com/Yubico/yubico-pam.git synced 2025-02-22 00:54:30 +01:00
Code Issues Projects Releases Wiki Activity

Update and rename YubikeyAndRadiusViaPAM.txt to Yubikey_and_Radius_via_PAM.adoc

Browse Source
This commit is contained in:
Henrik Stråth 2014-10-29 16:12:22 +01:00
parent 167479c889
commit ba80c13988
1 changed files with 8 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
doc/YubikeyAndRadiusViaPAM.txt → doc/Yubikey_and_Radius_via_PAM.adoc
View File

@ -16,9 +16,9 @@ Build instructions for pam_yubico are found in the pam_yubico ReadMe.
Install FreeRadius from your OS vendor packages: Install FreeRadius from your OS vendor packages:
Debian/Ubuntu: Debian/Ubuntu:
------
$ sudo apt-get install freeradius $ sudo apt-get install freeradius
------
== Add a Radius client stanza to /etc/freeradius/clients.conf == Add a Radius client stanza to /etc/freeradius/clients.conf
@ -41,23 +41,18 @@ Configure PAM for the Radius server
The PAM service is 'radiusd', and the configuration file is stored in /etc/pam.d/radiusd. Add something like: The PAM service is 'radiusd', and the configuration file is stored in /etc/pam.d/radiusd. Add something like:
------ auth sufficient pam_yubico.so id=16 debug
auth sufficient pam_yubico.so id=16 debug
------
Start FreeRadius in debug mode and test it Start FreeRadius in debug mode and test it
------------------------------------------ ------------------------------------------
As root, run: As root, run:
------ # /usr/sbin/freeradiusd -X
# /usr/sbin/freeradiusd -X
------
Then invoke a test client as follows: Then invoke a test client as follows:
------ $ radtest yubico vlrlcingbbkrctguicnijbegfjhrdhccefdthcuifkgr 127.0.0.1 0 pencil
$ radtest yubico vlrlcingbbkrctguicnijbegfjhrdhccefdthcuifkgr 127.0.0.1 0 pencil
------
If you get errors about non-existing user, you may need to create a Unix user 'yubico'. Whether this should be needed or not depends on PAM configuration. If you get errors about non-existing user, you may need to create a Unix user 'yubico'. Whether this should be needed or not depends on PAM configuration.