Enable Yubikey
This commit is contained in:
parent
440091481c
commit
620f2aa909
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
||||
*.retry
|
12
dot_scripts/ansible/mac_playbook.yaml
Normal file
12
dot_scripts/ansible/mac_playbook.yaml
Normal file
@ -0,0 +1,12 @@
|
||||
---
|
||||
- hosts: localhost
|
||||
connection: local
|
||||
become_method: sudo
|
||||
become: yes
|
||||
tasks:
|
||||
- name: Ensure yubikey is needed for authentication
|
||||
lineinfile:
|
||||
path: /etc/pam.d/authorization
|
||||
regexp: '^auth.*pam_yubico.so.*'
|
||||
line: "auth required /usr/local/lib/security/pam_yubico.so mode=challenge-response"
|
||||
insertbefore: "^account required pam_opendirectory.so"
|
Loading…
Reference in New Issue
Block a user