5 ms·

What needs to go into trusted_keys?

• corin_ 15y ago
  ~/.ssh/trusted_yubikeys ? It's the I'd of your specific Yubikey - I'm on my phone on a train right now, but off the top of my head it is the first 12 characters that get printed when you use your Yubikey. Pretty sure it's 12, anyway.
• corin_ 15y ago
  Yeah, it is 12. Here is a basic usage guide: # groupadd yubikey # usermod -G yubikey USERNAME # echo "yubikeyid" >> /home/USERNAME/.ssh/trusted_yubikeys # (yubikeyid is first 12 characters of the OTP) # chmod 755 /usr/local/bin/yubikey.sh # (this file is /usr/local/bin/yubikey.sh) # echo "Match group yubikey" >> /etc/ssh/sshd_config # echo " ForceCommand /usr/local/bin/yubikey.sh" >> /etc/ssh/sshd_config # (that's a tab before ForceCommand) # /etc/init.d/ssh restart
  • mentat 15y ago
    Thank you!
  • jaryd 15y ago
    If you're still on CentOS 5.7 you might need to upgrade your openssh package. Might I recommend openssh-5.8.p1 with the HPN patch (http://www.psc.edu/networking/projects/hpn-ssh/#patches http://www.psc.edu/networking/projects/hpn-ssh/#patches)
    • corin_ 15y ago
      Was I ever on CentOS 5.7?