summaryrefslogtreecommitdiffstats
path: root/files/2fa
diff options
context:
space:
mode:
authorKevin Fenzi <kevin@scrye.com>2015-01-31 00:23:41 +0000
committerKevin Fenzi <kevin@scrye.com>2015-01-31 00:23:41 +0000
commitc5bc520135e6306df818a3f577af127ba18399bd (patch)
treef2db236a6c9c11a8f5ad00cf7956be11629383a6 /files/2fa
parent5d2ffb4fbfaa68d5b56922b8cecdb7441122e0b7 (diff)
downloadansible-c5bc520135e6306df818a3f577af127ba18399bd.tar.gz
ansible-c5bc520135e6306df818a3f577af127ba18399bd.tar.xz
ansible-c5bc520135e6306df818a3f577af127ba18399bd.zip
Move this file to the right place
Diffstat (limited to 'files/2fa')
-rw-r--r--files/2fa/pam_url.conf.fed-cloud09.cloud.fedoraproject.org21
1 files changed, 21 insertions, 0 deletions
diff --git a/files/2fa/pam_url.conf.fed-cloud09.cloud.fedoraproject.org b/files/2fa/pam_url.conf.fed-cloud09.cloud.fedoraproject.org
new file mode 100644
index 000000000..9ce7690b8
--- /dev/null
+++ b/files/2fa/pam_url.conf.fed-cloud09.cloud.fedoraproject.org
@@ -0,0 +1,21 @@
+pam_url:
+{
+ settings:
+ {
+ url = "https://fas-all.phx2.fedoraproject.org:8443/"; # URI to fetch
+ returncode = "OK"; # The remote script/cgi should return a 200 http code and this string as its only results
+ userfield = "user"; # userfield name to send
+ passwdfield = "token"; # passwdfield name to send
+ extradata = "&do=login"; # extradata to send
+ prompt = "Password+Token: "; # password prompt
+ };
+
+ ssl:
+ {
+ verify_peer = true; # Should we verify SSL ?
+ verify_host = true; # Should we verify the CN in the SSL cert?
+ client_cert = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side certificate
+ client_key = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side key (can be same file as above if a single cert)
+ ca_cert = "/etc/pki/tls/private/totpcgi-ca.cert";
+ };
+};