Skip 2FA for a given subnet?

google / google-authenticator-libpam

Apache License 2.0

1.75k stars 280 forks source link

Closed rekire closed 3 years ago

rekire commented 3 years ago

I would like to know if there is a way to disable the 2FA e.g. just for a local subnet?

ThomasHabets commented 3 years ago

That is best done by having another PAM module check the remote address, and "jump" over the GA PAM module in that case.

I've not tried it, but here is a module that seems to allow that.