PowerScale OneFS 9.2.1.0 CLI Administration Guide

SSH Configuration using public keys

You can provide CLI support for SSH configuration using public keys that are stored in LDAP.

1. To provide support for SSH configuration using a public key, run the isi ssh settings modify command.

   isi ssh settings modify --auth-settings-template=publickey

2. To configure the Duo security platform, run the isi auth duo modify command.

   isi auth duo modify --ikey=<key> --host=api-example.duosecurity.com

   You are asked to enter the secret key and confirm the same.

   Enter skey:
    Confirm:

3. To enable the Duo provider, run the isi auth duo modify command.

   isi auth duo modify --enabled=true

4. To establish an SSH connection to a cluster node, run the following commands:

   $ ssh someuser@10.11.12.13 -i<location of the public key>
    Duo two-factor login for someuser
    Enter a passcode or select one of the following options:
    1. Duo Push to XXX-XXX-XXXX
    2. Phone call to XXX-XXX-XXXX
    3. SMS passcodes to XXX-XXX-XXXX
    Passcode or option (1-3): 1

   If the SSH connection is established, it logs you in.

   Success. Logging you in...