diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-12-07 21:30:57 +0100 |
|---|---|---|
| committer | Mergify <37929162+mergify[bot]@users.noreply.github.com> | 2023-12-08 17:06:26 +0000 |
| commit | 14b107442ebf1f4f44bad485c585d4b9cfd97384 (patch) | |
| tree | bc6650c325c1eee90ee5f47bf7101818a8531b28 /op-mode-definitions/generate-system-login-user.xml.in | |
| parent | 7f081cadd0855ebc1104919329c11c98de1445f1 (diff) | |
| download | vyos-1x-14b107442ebf1f4f44bad485c585d4b9cfd97384.tar.gz vyos-1x-14b107442ebf1f4f44bad485c585d4b9cfd97384.zip | |
login: T4943: use pam-auth-update to enable/disable Google authenticator
The initial version always enabled Google authenticator (2FA/MFA) support by
hardcoding the PAM module for sshd and login.
This change only enables the PAM module on demand if any use has 2FA/MFA
configured. Enabling the module is done system wide via pam-auth-update by
using a predefined template.
Can be tested using:
set system login user vyos authentication plaintext-password vyos
set system login user vyos authentication otp key 'QY735IG5HDHBFHS5W7Y2A4EM274SMT3O'
See https://docs.vyos.io/en/latest/configuration/system/login.html for additional
details.
(cherry picked from commit e134dc4171b051d0f98c7151ef32a347bc4f87e2)
Diffstat (limited to 'op-mode-definitions/generate-system-login-user.xml.in')
| -rwxr-xr-x | op-mode-definitions/generate-system-login-user.xml.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/op-mode-definitions/generate-system-login-user.xml.in b/op-mode-definitions/generate-system-login-user.xml.in index 237a13610..868bbcd46 100755 --- a/op-mode-definitions/generate-system-login-user.xml.in +++ b/op-mode-definitions/generate-system-login-user.xml.in @@ -16,7 +16,7 @@ <properties>
<help>Username used for authentication</help>
<completionHelp>
- <list><username></list>
+ <path>system login user</path>
</completionHelp>
</properties>
<children>
|