PowerScale OneFS 9.9.0.0 CLI Administration Guide

Configure Duo authentication with public keys

You can configure SSH to support logins from Duo using public keys that are stored in LDAP.

1. To configure SSH to support authentication with a public key, run the isi ssh settings modify command.

   isi ssh settings modify --auth-settings-template=publickey

2. To configure the Duo security platform, run the isi auth duo modify command.

   isi auth duo modify --ikey=<key> --host=api-example.duosecurity.com

   At the prompt, enter the secret key and confirm the same.

   Enter skey:
    Confirm:

3. To enable the Duo provider, run the isi auth duo modify command.

   isi auth duo modify --enabled=true

4. To establish an SSH connection to a cluster node:

   $ ssh someuser@10.11.12.13 -i<location of the public key>
    Duo two-factor login for someuser
    Enter a passcode or select one of the following options:
    1. Duo Push to XXX-XXX-XXXX
    2. Phone call to XXX-XXX-XXXX
    3. SMS passcodes to XXX-XXX-XXXX
    Passcode or option (1-3): 1

   If the SSH connection is established, it logs you in.

   Success. Logging you in...