Get the secret from AD - Githubissues

zbalkan / pam-totp

Linux Pluggable Authentication Module (PAM) for totp authentication

0 stars 0 forks source link

Get the secret from AD #1

Open zbalkan opened 1 year ago

zbalkan commented 1 year ago

Change the line below with an LDAP query. https://github.com/zbalkan/pam-totp/blob/8d264c9eac04852eac9fdf362a427ebb77a74c17/pam_totp.py#L11

Use the LAPS flow:

Create attribute(s) on AD and store secret there
Secure the attributes by using ACLs and security groups to read and write
Allow SELF to read, a group to reset/generate key after a successful login for onboarding. It requires a web app

zbalkan commented 1 year ago

Or use multiOTP