Duo Security

Duo Security Duo Unix - Two-Factor Authentication

Note

See the full Salt Formulas installation and usage instructions.

Available states

• duo.login
• duo.pam
• duo.pkgrepo
• duo.pkgrepo.absent

duo.login

Installs and configures the login_duo package.

duo.pam

Installs and configures the pam_duo package.

duo.pkgrepo

Enable the official Duo Security package repository in order to always benefit from the latest version.

duo.pkgrepo.absent

Undo the effects of duo.pkgrepo.

Configuration

Every option available as documented by Duo Security can be set in pillar.

duo:
  config:
    ikey: YOUR_INTEGRATION_KEY
    skey: YOUR_SECRET_KEY
    host: YOUR_API_HOSTNAME
    ...

Adding the pillar data config for the OpenSSH formula alongside the Duo formula configuration can easily handle enabling 2FA for sshd.

sshd_config:
  ForceCommand: /usr/sbin/login-duo
  PermitTunnel: False
  AllowTcpForwarding: False
  UseDNS: False