You can find per-distribution PAM settings at duo.com/docs/duounix. Edit your PAM configuration to match the recommendations for your distribution.Edit your /etc/ssh/sshd_config file to include the following lines:.configure -with-pam -prefix=/usr & make & sudo make install Install Duo with PAM from inside the Duo folder:.Download Duo for Unix (this requires an Internet connection):.Install the prerequisite software, OpenSSL and libpam (relevant installation instructions for Linux systems are excerpted below from the Duo website at duo.com/docs/duounix):. You will receive a response with the keys and URL needed to complete the installation. If you cannot generate the keys and hostname yourself, request the API keys and Duo API hostname by submitting a Help request and provide the hostname(s) of the systems to secure with Duo.Run the following command, where "" is replaced with the fully-qualified domain name of the node:.For instructions, see Keytabs and Wallet. Install wallet if you have not already done so.Authenticate yourself via Kerberos (i.e., kinit) if you have not already done so.To generate the keys and hostname yourself: You can either generate the keys and hostname yourself or submit a request for them. Obtain your API keys (integration key and secret key) and Duo API hostname, which you need to integrate with the Stanford University Duo installation.Before you install Duo, create a verified recoverable backup of the server (strongly recommended).The Information Security Office (ISO) encourages you to share advanced configurations with the Stanford Linux users community. These instructions explain how to install Duo on a stock system. Risk Classifications: Approved Services.Watch Information Security Awareness Video.They will disable your phone from being able to authenticate with Duo and help you log in using another device. ** Please note: If the device you use to authenticate with Duo has been lost or stolen, please contact the University IT Help Desk at 275-2000 or ISD Help Desk at (585) 275-3200 immediately. If you do not have an alternate/back-up device enrolled in Duo, call the Univ IT Help Desk at (585) 275-2000 for NetID or ISD Help Desk at (585) 275-3200 for all other credentials.(See the Device Management Guide for detailed tutorials.) Use the Actions drop-down menu to delete your old phone, then click “Enroll another device” to enroll your new phone.From the Device drop-down menu, select your alternate/backup device, then click “Manage Devices” to authenticate using Duo.Log into the University or URMC Two-Factor Authentication Enrollment site.If you have an alternate/backup device enrolled in Duo:.You will authenticate with Duo exactly as you did on your old phone. No action is required If you use the phone call or text message options.If you use the Push option through the Duo Mobile app installed on your phone, follow this tutorial to reactivate Duo Mobile on your new phone.You may log back into the University or URMC Two-Factor Authentication Enrollment sites at any time to manage, add, or remove devices. Duo Security does not provide services in your current location” in the Duo Prompt? Why am I seeing the message “Access denied.I am unable to install the Duo Mobile app from the App store.Why can't I receive SMS texts and phone calls from Duo?.Why can't I receive Push notifications from Duo, but I can receive SMS texts and phone calls from Duo?.I replaced the phone I enrolled in Duo, can I change my devices after I enroll?.What do I do if I get a notification from Duo that I did not request?.Can I use the app on my smart phone without affecting my data plan & if I use the text message or phone call option, will I be charged by my phone company?.Can international phone numbers be used in Duo?.How do I authenticate with my smart phone app if I don't have cell signal, data, or Wi-Fi connection?.If I can't connect to the network or VPN, how do I enroll?.What devices are supported by Duo & can I set up more than one device?.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |