two-factor authentication for unix systems
Project homepage: https://duo.com/docs/loginduo/
Description
login_duo provides two-factor authentication for Unix systems. When
integrated with sshd(8) a challenge is sent to the users cell phone
before access is granted.
Package information
- Ports path
- sysutils/login_duo
- Package architecture
- amd64
- Maintainer
- The OpenBSD ports mailing-list <ports@openbsd.org>
- Categories
- sysutils
- Available flavors
- None listed
Ports list build and test dependencies as well as runtime dependencies. pkg_add selects those needed for installation.
Direct dependencies
None listed.
OpenBSD README
This README contains unresolved ports variables; replace them before using its commands.
+-----------------------------------------------------------------------
| Running login_duo on OpenBSD
+-----------------------------------------------------------------------
First steps
===========
In order to use Duo Unix for two-factor authentication you have to first
sign up for an account if you don't already have one.
https://signup.duosecurity.com/
Then create a new UNIX Integration to get an integration key, secret
key, and API hostname. (See:
https://www.duosecurity.com/docs/getting_started)
Once you have this information, edit ${SYSCONFDIR}/login_duo.conf to
match your keys.
Test login_duo
==============
As a regular user, run /usr/local/sbin/login_duo. You should
be provided with an enrollment link. Enroll your phone then run
/usr/local/sbin/login_duo again. Once you provide a valid pass
code you should get a SUCCESS message.
Enable SSH two-factor authentication
====================================
To enable two-factor authentication add
ForceCommand /usr/local/sbin/login_duo
to your ${SYSCONFDIR}/ssh/sshd_config. Duo Security recommends disabling
PermitTunnel and AllowTcpForwarding when using two-factor
authentication.
When finished, restart sshd.