Duo Security Duo Unix - Two-Factor Authentication
Note
See the full Salt Formulas installation and usage instructions.
Installs and configures the login_duo package.
Installs and configures the pam_duo package.
Enable the official Duo Security package repository in order to always benefit from the latest version.
Undo the effects of duo.pkgrepo.
Every option available as documented by Duo Security can be set in pillar.
duo:
config:
ikey: YOUR_INTEGRATION_KEY
skey: YOUR_SECRET_KEY
host: YOUR_API_HOSTNAME
...
Adding the pillar data config for the OpenSSH formula alongside the Duo formula configuration can easily handle enabling 2FA for sshd.
sshd_config: ForceCommand: /usr/sbin/login-duo PermitTunnel: False AllowTcpForwarding: False UseDNS: False