This website is deprecated, and remains online only for historic access to old issues and docs for historic versions of Virtualmin. It has been unmaintained for several years, and should not be relied on for up-to-date information. Please visit www.virtualmin.com instead.

[solved] Adding systems to cloudmin that require Challenge Response authentication

3 posts / 0 new

Topic locked

Last post

#1 Tue, 02/12/2013 - 00:24

nf

[solved] Adding systems to cloudmin that require Challenge Response authentication

Hi,

I was wondering if it is possible to add a system to cloudmin, that does not allow login via SSH via a standard PW. I am using libpam-google-authenticator on my Debian bases systems and would like to add them to cloudmin.

Any recommendation about how to implement this setup?

#2 Tue, 02/12/2013 - 08:33

andreychek

Howdy,

Actually, I'm going to revise my reply and ask more about how this works :-)

Can you describe what your SSH login process is like?

What would Cloudmin have to do in order to support?

-Eric

#3 Tue, 02/12/2013 - 13:58

nf

Hi Eric,

Thanks for your reply. In the meantime I found out the solution for my problem.

Libpam-google-authenticator activates a 2-step login. To login into the system, you first have to enter a one-time-password, after that the normal a password.

It turns out, that when using public-key authentication, the 2-step authorization is bypassed. This is the solution for the setup with libpam-google-authenticator.

What I first tried, was disabling SSH (activating "Do not attempt SSH login") but having Webmin enabled on the system. I was hoping that Cloudmin can communicate with the client system completely via the Webmin RPC interface. The status of the system was changed from "webmin" to "alive". Most of the features are not available in this mode.

It seems, that SSH is indispensable. Is that right, or would a non-SSH configuration work?

Topic locked