Two-factor auth with Yubikey

[tacofrog2]

I am setting up two-factor authentication on my Ubuntu (KDE on Xenial) machine with a Yubikey. I am having trouble getting NoMachine to ask for my Yubikey after I enter my password. I followed the steps here to set up two-factor for Google Authenticator (but changing google_auth.so with pam_u2f.so) because it should work the same way, just different in how you get the OTP.

I have only tested on connecting from Windows to this Ubuntu machine as this is my main use for NoMachine. I put the machines side-by-side and tried to connect and after I enter my password to connect to the Ubuntu server, NoMachine tries to connect but the server is waiting for the Yubikey. I can plug in and press the Yubikey on the server and the connection will succeed. But I need to use the Yubikey on the client side. How can I get NoMachine to ask for the Yubikey after I enter my password?

 

Both machines are up-to-date to 5.3.9

[bakhtadze]

Hello,

two-factor authentication with YubiKey is not supported yet, neither via NX protocol nor with SSH protocol,

but we have in plan to add it:

https://www.nomachine.com/FR07N03138

But at the moment, with some additional configurations is possible to authenticate

with YubiKey from Linux client to Linux server (via SSH protocol), but not from Windows client.

If you are interested to this solution, we can provide more details.

[Author]

Posts