vyos-1x.git - VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)

Age	Commit message (Collapse)	Author
2023-02-24	login: T4943: Fixed 2FA + RADIUS compatibility	zsdc
	MFA requires KbdInteractiveAuthentication to ask a second factor, and the RADIUS module for PAM does not like it, which makes them incompatible. This commit: * disables KbdInteractiveAuthentication * changes order for PAM modules - make it first, before `pam_unix` or `pam_radius_auth` * enables the `forward_pass` option for `pam_google_authenticator` to accept both password and MFA in a single input As a result, local, RADIUS, and MFA work together. Important change: MFA should be entered together with a password. Before: ``` vyos login: <USERNAME> Password: <PASSWORD> Verification code: <MFA> ``` Now: ``` vyos login: <USERNAME> Password & verification code: <PASSWORD><MFA> ```
2022-10-17	ssh: T4720: Ability to configure SSH-server HostKeyAlgorithms	Viacheslav Hletenko
	Ability to configure SSH-server HostKeyAlgorithms. Specifies the host key signature algorithms that the server offers. Can accept multiple values.
2022-10-12	Merge pull request #1555 from goodNETnick/ssh_otp	Christian Poessinger
	system login: T874: add 2FA support for local and ssh authentication
2022-10-11	system login: T874: add 2FA support for local and ssh authentication	goodNETnick

2022-10-10	ssh: T4716: Ablity to configure RekeyLimit data and time	Viacheslav Hletenko
	Ability to configure SSH RekeyLimit data (in Megabytes) and time (in Minutes) set service ssh rekey data 1024 set service ssh rekey time 60
2022-04-14	ssh: T4353: fix Jinja2 linting errors	Christian Poessinger