ONID Shell Server - Login with Duo

Tags Duo ONID

Issue/Question

  • How does Duo auth work with the ONID shell server?
  • How does Duo auth work with the Engineering unix servers?
  • How do I use Duo with the Linux/Unix shell servers?
  • Is Duo required for public key SSH authentication?

Environment

  • Oregon State University
  • Linux/Unix servers for ONID and College of Engineering
  • Duo

Explanation

A compromised account can be used to connect to a public-facing Linux/Unix shell server and send spam email or attack other hosts. Duo two-step login makes it more difficult for bad actors to abuse OSU accounts.

Beginning March 26, 2019, Duo two-step login will be required for all Duo-enrolled users on the following servers:

  • shell.onid.oregonstate.edu
  • access.engr.oregonstate.edu
  • flip.engr.oregonstate.edu
  • nome.eecs.oregonstate.edu

Resolution

If you are enrolled in Duo, you will be prompted to Duo authenticate after you enter your username and password. 

If you have multiple Duo devices enrolled, you will be prompted to select from a list. You may enter either a passcode from your Duo hardware token or Duo Mobile app, or select a number from the menu to receive a Duo push.

The Duo login on shell.onid.oregonstate.edu looks like this:

Password:
Duo two-factor login for username

Enter a passcode or select one of the following options:

  1. Duo Push to XXX-XXX-0123

Passcode or option (1-1): 

In this example, press 1 to have a Duo push sent to your device.

After you have approved the Duo request on your device, you will see a success message:

Passcode or option (1-1): 1
Success. Logging you in...

 

Public Key Authentication

If you authenticate to shell.onid.oregonstate.edu using SSH public keys (e.g. via a scripted process) Duo authentication is not required. Steps for setting this up can be found here: https://it.engineering.oregonstate.edu/ssh-keygen
NOTE: These steps reference the engineering server access.engr@oregonstate.edu. These can be replaced with shell.onid.oregonstate.edu or any of the other servers listed above.

 

 

For assistance, contact the IS Service Desk.

Details

Article ID: 74269
Created
Thu 3/21/19 11:51 AM
Modified
Tue 5/14/19 4:39 PM

Related Articles (1)