summaryrefslogtreecommitdiff
path: root/src/init
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2023-12-08 18:34:53 +0100
committerGitHub <noreply@github.com>2023-12-08 18:34:53 +0100
commitf44cf2923bf12360e5665cb8d7391557241fba96 (patch)
treebc6650c325c1eee90ee5f47bf7101818a8531b28 /src/init
parent7f081cadd0855ebc1104919329c11c98de1445f1 (diff)
parent14b107442ebf1f4f44bad485c585d4b9cfd97384 (diff)
downloadvyos-1x-f44cf2923bf12360e5665cb8d7391557241fba96.tar.gz
vyos-1x-f44cf2923bf12360e5665cb8d7391557241fba96.zip
Merge pull request #2593 from vyos/mergify/bp/sagitta/pr-2584
login: T4943: use pam-auth-update to enable/disable Google authenticator (backport #2584)
Diffstat (limited to 'src/init')
-rwxr-xr-xsrc/init/vyos-router2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/init/vyos-router b/src/init/vyos-router
index 3445da2cf..fdf71f030 100755
--- a/src/init/vyos-router
+++ b/src/init/vyos-router
@@ -260,6 +260,8 @@ EOF
rm -f /etc/pam_radius_auth.conf
pam-auth-update --disable tacplus-mandatory tacplus-optional
rm -f /etc/tacplus_nss.conf /etc/tacplus_servers
+ # and no Google authenticator for 2FA/MFA
+ pam-auth-update --disable mfa-google-authenticator
# Certain configuration files are re-generated by the configuration
# subsystem and must reside under /etc and can not easily be moved to /run.