Sign Up
Multi Factor Authentication Adaptive Multi Factor Authentication MFA Comparison Table Risk Based Multi Factor Authentication Risk Based MFA a faster solution Automated Multi Factor Authentication Seamless Multi Factor Authentication Background Multi Factor Authentication
Company Download (iOS) Download (Android) Awards Patents FAQ Pricing Help Contact Us Press Release Privacy Policy Terms of Use
Documentation Documentation home
Remote Desktop [RDP] Remote Desktop [RDP] overview Adaptive Multi Factor Authentication Remote Desktop (RDP) How to remove Spriv Multi-Factor Authentication (RDP)? How to connect to Remote Desktop Server protect by Spriv Multi Factor Authentication What are the different Multi Factor Authentication methods to login into RDP Remote Desktop Protocol protected by Spriv Multi Factor Authentication How can I log in to my computer protected by Spriv's RDP if my internet service is down or experiencing a malfunction?
Multi Factor Authentication Multi Factor Authentication overview Windows Multi-Factor Authentication (MFA) & Adaptive MFA for Remote Desktop (RDP) Continuous Multi Factor Authentication Spriv's Adaptive Multi Factor Authentication Getting Started Account Recovery options Users Management – Terms Users Management – Add Users Users Management – Account Profile How the Pairing process works? How to Pair a mobile phone with a username Unix/Linux PAM Adaptive Multi Factor Authentication
API Documentation
Client Login Sign Up
Unix/Linux · Installation

Unix/Linux PAM Adaptive Multi Factor Authentication

Install Spriv's PAM module to protect SSH, SU and SUDO authenticate once, then validate subsequent transactions continuously in the background.

Unix/Linux PAM Adaptive Multi Factor Authentication
Before you begin: the login user must already exist in Spriv's end-user list and be paired with a mobile device. Do not use sudo when unzipping the installer.

  1. Sign up for a company account

    See the Getting Started page.

  2. Verify the user is paired

    Confirm the login user exists in Spriv's end-user list and is paired with a mobile device.

  3. Request the installer

    Request the "Linux Adaptive PAM/SSH zip" via Spriv's contact page.

  4. Copy the file to your server

    pscp.exe Spriv-PAM-master.zip davidpino@192.169.137.155:/home/davidpino/Spriv-Pam-master.zip

  5. Unzip (without sudo)

    unzip Spriv-Pam-master.zip

  6. Make the build script executable

    chmod +x build_system.sh

  7. Run the build script

    ./build_system.sh

  8. Configure

    ./configure

  9. Build

    make

  10. Install

    sudo make install

  11. Review the install log

    sudo cat config.log

  12. Add your company key and secret

    sudo vi /etc/spriv/pam.conf

  13. Configure the SSH daemon

    sudo vi /etc/ssh/sshd_config

  14. Update PAM SSH rules

    sudo vi /etc/pam.d/sshd module stacking is distro-specific.

  15. Enable SELinux boolean (as root)

    setsebool -P authlogin_yubikey 1

  16. Restart SSH

    Restart the SSH service the command varies by distribution.

Required sshd_config settings

Confirm before restarting SSH

  • UsePAM yes
  • ChallengeResponseAuthentication yes
  • UseDNS no
  • PubkeyAuthentication yes
  • PasswordAuthentication no
Important: to avoid locking yourself out, leave your current session open and test the new configuration from a second connection before finalizing. PAM module stacking differs between Fedora 23/CentOS 7/6 and Ubuntu 15 check your distribution's requirements.
Back to: Windows MFA overview →
Was this helpful?