Difference between revisions of "Authentification"
From Blue-IT.org Wiki
(→Yubikey) |
(→Personalisation Tool) |
||
| Line 5: | Line 5: | ||
Please read and make yourself familiar with OTP and the concept or '''Two Factor Authentification'''. | Please read and make yourself familiar with OTP and the concept or '''Two Factor Authentification'''. | ||
| − | === Personalisation Tool === | + | === Personalisation Tool and basic installation on Ubuntu === |
You can use a ppa to install the required software in '''Ubuntu''': | You can use a ppa to install the required software in '''Ubuntu''': | ||
| Line 12: | Line 12: | ||
* https://www.yubico.com/products/services-software/personalization-tools/use/ | * https://www.yubico.com/products/services-software/personalization-tools/use/ | ||
| − | sudo apt-get install yubikey-personalization yubikey-personalization-gui yubikey-neo-manager yubioath-desktop ykneomgr | + | sudo apt-get install yubikey-personalization yubikey-personalization-gui yubikey-neo-manager yubioath-desktop ykneomgr yubico-piv-tool |
[[Image:Yubi_unity.png]] | [[Image:Yubi_unity.png]] | ||
| − | |||
=== Owncloud === | === Owncloud === | ||
Revision as of 08:49, 19 August 2015
Contents
Yubikey
Please read and make yourself familiar with OTP and the concept or Two Factor Authentification.
Personalisation Tool and basic installation on Ubuntu
You can use a ppa to install the required software in Ubuntu:
- https://launchpad.net/~yubico/+archive/ubuntu/stable
- https://www.yubico.com/products/services-software/personalization-tools/use/
sudo apt-get install yubikey-personalization yubikey-personalization-gui yubikey-neo-manager yubioath-desktop ykneomgr yubico-piv-tool
Owncloud
Two-factor authentication for ownCloud using one-time passwords (OTP) from Yubikey:
One Time Password Backend:
SSH
SSH Authentication with YubiKey | Linux Action Show 373 from Jupiter Broadcasting
SSH
Generally: only use key based authentification with your ssh-webserver login!
vim /etc/ssh/sshd_config
[...] PermitRootLogin without-password StrictModes yes RSAAuthentication yes PubkeyAuthentication yes IgnoreRhosts yes RhostsRSAAuthentication no HostbasedAuthentication no PermitEmptyPasswords no ChallengeResponseAuthentication no PasswordAuthentication no # <<<< !!!! X11Forwarding no UseLogin no UsePAM no <<<< !!!!