Configuring the Linux Authentication System

In this section, the Tellaro’s PAM configuration is modified to require the strongauth user to authenticate on the Console with:

• The credential’s Linux password; and
• Security Key with USB Type -A connector

Steps

1. Log into the server as root user and open a new shell window

2. Add a group named mfausers to /etc/group

   shell> groupadd mfausers
   

3. Add the strongauth account to the mfausers group

   shell> gpasswd --a strongauth mfausers
   

   NOTE: StrongKey recommends against adding the root user to mfausers, as the system may get locked out if something goes wrong with the MFA setup.

4. Create an empty file called /var/log/pamfido.log

   shell> touch /var/log/pamfido.log
   

5. Make the pamfido.log file write-able by the group

   shell> chmod 664 /var/log/pamfido.log