cookbook 'google-authenticator', '= 0.1.5'
google-authenticator (3) Versions 0.1.5 Follow2
Installs/Configures google-authenticator
cookbook 'google-authenticator', '= 0.1.5', :supermarket
knife supermarket install google-authenticator
knife supermarket download google-authenticator
google-authenticator Cookbook
Installs google-authenticator.
Requirements
This requires the opencode-openssh, which can be found here:
https://github.com/opscode-cookbooks/openssh
This has been tested on Fedora 19. It may work on other Linux distributions.
Attributes
-
['google-authenticator']['package_name']
- name of google package authentication package. Defaults togoogle-authenticator
-
['google-authenticator']['sshd_pamd']
- location of sshd pam module. Defaults to/etc/pam.d/sshd
Usage
Just include google-authenticator
in your node's run_list
, along with opscode's openssh:
{ "name":"my_node", "run_list": [ "recipe[google-authenticator]", "recipe[openssh]" ] }
Then override the server attribute for openssh with:
{ "server":{ "ChallengeResponseAuthentication":"yes" } }
You may also override ['google-authenticator']['sshd_pamd_'] attribute if the location is different.
Note that this cookbook makes a changes on the pam file through the use of Chef::Util::FileEdit:insert_line_if_no_match(). If you are running a version of Chef client earlier than 10.16.x, this cookbook may not work.
More information on setting up Google Authenticator can be found at this URL:
http://www.mnxsolutions.com/security/two-factor-ssh-with-google-authenticator.html
Contributing
If you want to contribute.
- Fork the repository on Github
- Create a named feature branch (like
add_component_x
) - Write your change
- Submit a Pull Request using Github
License and Authors
Authors: Rilindo Foster rilindo.foster@monzell.com
Dependent cookbooks
openssh >= 0.0.0 |
Contingent cookbooks
There are no cookbooks that are contingent upon this one.