ssh key and yubikey

wdatkinson · 11-12-2019, 10:53 AM

I have a cloud-based Debian 9 box that is currently authenticating by yubikey and password. My desire to is to replace the password with an ssh key. The end result would be upon an inbound connection, the yubikey would be inserted and the button pressed and viola, I'm in.

So far I'm able to get the box to auth with ssh keys or the password/yubikey option, but not the ssh-key/yubikey config.

There are several articles online that reference similar issues, but none of them seem to help. Most of them detail disabling PAM, but I need PAM to do the yubikey auth. I've tried various AuthenticationMethods in /etc/ssh/sshd_config as disabling common-auth in /etc/pam.d/sshd but no joy.

Anyone try this?

PECONET009 · 11-12-2019, 12:02 PM

Quote:

Originally Posted by wdatkinson

I have a cloud-based Debian 9 box that is currently authenticating by yubikey and password. My desire to is to replace the password with an ssh key. The end result would be upon an inbound connection, the yubikey would be inserted and the button pressed and viola, I'm in.

So far I'm able to get the box to auth with ssh keys or the password/yubikey option, but not the ssh-key/yubikey config.

There are several articles online that reference similar issues, but none of them seem to help. Most of them detail disabling PAM, but I need PAM to do the yubikey auth. I've tried various AuthenticationMethods in /etc/ssh/sshd_config as disabling common-auth in /etc/pam.d/sshd but no joy.

Anyone try this?

More here;
https://ocramius.github.io/blog/yubi...d-local-login/