google-authenticator Cookbook

Installs google-authenticator.

Requirements

This requires the opencode-openssh, which can be found here:

https://github.com/opscode-cookbooks/openssh

This has been tested on Fedora 19. It may work on other Linux distributions.

Attributes

• ['google-authenticator']['package_name'] - name of google package authentication package. Defaults to google-authenticator
• ['google-authenticator']['sshd_pamd'] - location of sshd pam module. Defaults to /etc/pam.d/sshd

Usage

Just include google-authenticator in your node's run_list, along with opscode's openssh:

{
  "name":"my_node",
  "run_list": [
    "recipe[google-authenticator]",
    "recipe[openssh]"
  ]
}

Then override the server attribute for openssh with:

{
    "server":{
        "ChallengeResponseAuthentication":"yes"
    }
}

You may also override ['google-authenticator']['sshd_pamd_'] attribute if the location is different.

Note that this cookbook makes a changes on the pam file through the use of Chef::Util::FileEdit:insert_line_if_no_match(). If you are running a version of Chef client earlier than 10.16.x, this cookbook may not work.

More information on setting up Google Authenticator can be found at this URL:

http://www.mnxsolutions.com/security/two-factor-ssh-with-google-authenticator.html

Contributing

If you want to contribute.

1. Fork the repository on Github
2. Create a named feature branch (like add_component_x)
3. Write your change
4. Submit a Pull Request using Github

License and Authors

Authors: Rilindo Foster rilindo.foster@monzell.com