Home
Man
Search
Today's Posts
Register

If you're not sure where to post a Unix or Linux question, post it here. All unix and Linux beginners welcome in this forum!

Allow AD service account SSH to Linux systems without 2FA

Tags
centos 7, linux, pam, sshd, two-factor authentication

Login to Reply

 
Thread Tools Search this Thread
# 1  
Old 06-14-2018
Allow AD service account SSH to Linux systems without 2FA

I have Windows AD server and all of the linux computers are joined to AD.

Recently, 2FA has been activated, I wish to exclude some of the domain service accounts from 2FA


Code:
[root@Linux]# less /etc/pam_radius_acl.conf
sshd:*

[root@Linux]# /etc/pam.d/sshd

auth required pam_sepermit.so
auth requisite pam_defender.so
auth requisite pam_defender.so
auth substack password-auth
auth include postlogin
-auth optional pam_reauthorize.so prepare
account required pam_nologin.so
account include password-auth
password include password-auth
session required pam_selinux.so close
session required pam_loginuid.so
session required pam_selinux.so open env_params
session required pam_namespace.so
session optional pam_keyinit.so force revoke
session include password-auth
session include postlogin
-session optional pam_reauthorize.so prepare

[root@Linux]# less /etc/ssh/sshd_config 
UsePAM yes
ChalllengeResponseAuthentication yes



Moderator's Comments:
Allow AD service account SSH to Linux systems without 2FA Please use CODE tags as required by forum rules!

Last edited by davidpar007; 06-19-2018 at 04:06 AM.. Reason: Added CODE tags.
Login to Reply

« Previous Thread | Next Thread »
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Restrict service account from direct interactive sessions bgstack15 UNIX for Advanced & Expert Users 2 10-05-2018 04:51 PM
[Tip] Using DHCP for Managed Systems Service Processors bakunin AIX 0 05-07-2014 10:34 AM
Joing Linux systems to AD and move to OU snjksh UNIX for Advanced & Expert Users 1 08-04-2013 05:34 PM
Different Linux Systems MFARMER UNIX for Dummies Questions & Answers 2 08-12-2008 11:15 AM
Linux Systems Administrators TonyChapman Linux 2 05-01-2008 01:24 PM
On HP Systems, how do you enable an account?? TRUEST UNIX for Dummies Questions & Answers 1 07-10-2003 01:02 PM
Backup Linux file systems aravind_mg Filesystems, Disks and Memory 1 12-05-2002 07:48 PM


All times are GMT -4. The time now is 09:55 AM.

Unix & Linux Forums Content Copyright 1993-2018. All Rights Reserved.
UNIX.COM Login
Username:
Password:  
Show Password