EnglishFrenchSpanish

OnWorks favicon

ykpamcfg - Online in the Cloud

Run ykpamcfg in OnWorks free hosting provider over Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

This is the command ykpamcfg that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

PROGRAM:

NAME


ykpamcfg - Manage user settings for the Yubico PAM module

SYNOPSIS


ykmapcfg [-1 | -2] [-A] [-p] [-i] [-v] [-V] [-h]

OPTIONS


-1
use slot 1. This is the default.

-2
use slot 2.

-A action
choose action to perform. See ACTIONS below.

-p path
specify output file for, default is ~/.yubico/challenge

-i iterations
number of iterations to use for pbkdf2 of expected response

-v
enable verbose mode.

-V
display version and exit

-h
display help and exit

ACTIONS


add_hmac_chalresp
The PAM module can utilize the HMAC-SHA1 Challenge-Response mode found in YubiKeys
starting with version 2.2 for offline authentication. This action creates the initial
state information with the C/R to be issued at the next logon.

The utility currently outputs the state information to a file in the current user’s home
directory (~/.yubico/challenge-123456 for a YubiKey with serial number API readout
enabled, and ~/.yubico/challenge for one without).

The PAM module supports a system wide directory for these state files (in case the user’s
home directories are encrypted), but in a system wide directory, the challenge part should
be replaced with the username. Example : /var/yubico/challenges/alice-123456.

To use the system-wide mode, you currently have to move the generated state files manually
and configure the PAM module accordingly.

EXAMPLES


First, program a YubiKey for challenge response on Slot 2 :

$ ykpersonalize -2 -ochal-resp -ochal-hmac -ohmac-lt64 -oserial-api-visible
...
Commit? (y/n) [n]: y

Now, set the current user to require this YubiKey for logon :

$ ykpamcfg -2 -v
...
Stored initial challenge and expected response in '/home/alice/.yubico/challenge-123456'.

Then, configure authentication with PAM for example like this (make a backup first) :

/etc/pam.d/common-auth (from Ubuntu 10.10) :

auth required pam_unix.so nullok_secure try_first_pass
auth [success=1 new_authtok_reqd=ok ignore=ignore default=die] pam_yubico.so mode=challenge-response
auth requisite pam_deny.so
auth required pam_permit.so
auth optional pam_ecryptfs.so unwrap

Use ykpamcfg online using onworks.net services


Free Servers & Workstations

Download Windows & Linux apps

  • 1
    Osu!
    Osu!
    Osu! is a simple rhythm game with a well
    thought out learning curve for players
    of all skill levels. One of the great
    aspects of Osu! is that it is
    community-dr...
    Download Osu!
  • 2
    LIBPNG: PNG reference library
    LIBPNG: PNG reference library
    Reference library for supporting the
    Portable Network Graphics (PNG) format.
    Audience: Developers. Programming
    Language: C. This is an application that
    can also...
    Download LIBPNG: PNG reference library
  • 3
    Metal detector based on  RP2040
    Metal detector based on RP2040
    Based on Raspberry Pi Pico board, this
    metal detector is included in pulse
    induction metal detectors category, with
    well known advantages and disadvantages.
    RP...
    Download Metal detector based on RP2040
  • 4
    PAC Manager
    PAC Manager
    PAC is a Perl/GTK replacement for
    SecureCRT/Putty/etc (linux
    ssh/telnet/... gui)... It provides a GUI
    to configure connections: users,
    passwords, EXPECT regula...
    Download PAC Manager
  • 5
    GeoServer
    GeoServer
    GeoServer is an open-source software
    server written in Java that allows users
    to share and edit geospatial data.
    Designed for interoperability, it
    publishes da...
    Download GeoServer
  • 6
    Firefly III
    Firefly III
    A free and open-source personal finance
    manager. Firefly III features a
    double-entry bookkeeping system. You can
    quickly enter and organize your
    transactions i...
    Download Firefly III
  • More »

Linux commands

Ad