diff options
| author | Kevin Fenzi <kevin@scrye.com> | 2015-01-31 00:23:41 +0000 |
|---|---|---|
| committer | Kevin Fenzi <kevin@scrye.com> | 2015-01-31 00:23:41 +0000 |
| commit | c5bc520135e6306df818a3f577af127ba18399bd (patch) | |
| tree | f2db236a6c9c11a8f5ad00cf7956be11629383a6 /files/2fa | |
| parent | 5d2ffb4fbfaa68d5b56922b8cecdb7441122e0b7 (diff) | |
| download | ansible-c5bc520135e6306df818a3f577af127ba18399bd.tar.gz ansible-c5bc520135e6306df818a3f577af127ba18399bd.tar.xz ansible-c5bc520135e6306df818a3f577af127ba18399bd.zip | |
Move this file to the right place
Diffstat (limited to 'files/2fa')
| -rw-r--r-- | files/2fa/pam_url.conf.fed-cloud09.cloud.fedoraproject.org | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/files/2fa/pam_url.conf.fed-cloud09.cloud.fedoraproject.org b/files/2fa/pam_url.conf.fed-cloud09.cloud.fedoraproject.org new file mode 100644 index 000000000..9ce7690b8 --- /dev/null +++ b/files/2fa/pam_url.conf.fed-cloud09.cloud.fedoraproject.org @@ -0,0 +1,21 @@ +pam_url: +{ + settings: + { + url = "https://fas-all.phx2.fedoraproject.org:8443/"; # URI to fetch + returncode = "OK"; # The remote script/cgi should return a 200 http code and this string as its only results + userfield = "user"; # userfield name to send + passwdfield = "token"; # passwdfield name to send + extradata = "&do=login"; # extradata to send + prompt = "Password+Token: "; # password prompt + }; + + ssl: + { + verify_peer = true; # Should we verify SSL ? + verify_host = true; # Should we verify the CN in the SSL cert? + client_cert = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side certificate + client_key = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side key (can be same file as above if a single cert) + ca_cert = "/etc/pki/tls/private/totpcgi-ca.cert"; + }; +}; |
