Sign Up
Unix/Linux · Installation

Unix/Linux PAM Adaptive Multi Factor Authentication

Install Spriv's PAM module to protect SSH, SU and SUDO authenticate once, then validate subsequent transactions continuously in the background.

Adaptive Authentication for Linux and Unix: the fastest two factor authentication · Watch on its own page
Before you begin: the login user must already exist in Spriv's end-user list and be paired with a mobile device. Do not use sudo when unzipping the installer.

  1. Sign up for a company account

    See the Getting Started page.

  2. Verify the user is paired

    Confirm the login user exists in Spriv's end-user list and is paired with a mobile device.

  3. Request the installer

    Request the "Linux Adaptive PAM/SSH zip" via Spriv's contact page.

  4. Copy the file to your server

    pscp.exe Spriv-PAM-master.zip davidpino@192.169.137.155:/home/davidpino/Spriv-Pam-master.zip

  5. Unzip (without sudo)

    unzip Spriv-Pam-master.zip

  6. Make the build script executable

    chmod +x build_system.sh

  7. Run the build script

    ./build_system.sh

  8. Configure

    ./configure

  9. Build

    make

  10. Install

    sudo make install

  11. Review the install log

    sudo cat config.log

  12. Add your company key and secret

    sudo vi /etc/spriv/pam.conf

  13. Configure the SSH daemon

    sudo vi /etc/ssh/sshd_config

  14. Update PAM SSH rules

    sudo vi /etc/pam.d/sshd module stacking is distro-specific.

  15. Enable SELinux boolean (as root)

    setsebool -P authlogin_yubikey 1

  16. Restart SSH

    Restart the SSH service the command varies by distribution.

Required sshd_config settings

Confirm before restarting SSH

  • UsePAM yes
  • ChallengeResponseAuthentication yes
  • UseDNS no
  • PubkeyAuthentication yes
  • PasswordAuthentication no
Important: to avoid locking yourself out, leave your current session open and test the new configuration from a second connection before finalizing. PAM module stacking differs between Fedora 23/CentOS 7/6 and Ubuntu 15 check your distribution's requirements.
Back to: Windows MFA overview →
Was this helpful?