salt.auth.yubico
Provide authentication using YubiKey.
New in version 2015.5.0.
- depends
-
yubico-client Python module
To get your YubiKey API key you will need to visit the website below.
https://upgrade.yubico.com/getapikey/
The resulting page will show the generated Client ID (aka AuthID or API ID) and the generated API key (Secret Key). Make a note of both and use these two values in your /etc/salt/master configuration.
/etc/salt/master
yubico_users: damian: id: 12345 key: ABCDEFGHIJKLMNOPQRSTUVWXYZexternal_auth: yubico: damian: - test.*
Please wait five to ten minutes after generating the key before testing so that the API key will be updated on all the YubiCloud servers.
-
Authenticate against yubico server
salt.auth.yubico.auth(username, password)
salt.auth.yubico.groups(username, *args, **kwargs)
© 2021 SaltStack.
Licensed under the Apache License, Version 2.0.
https://docs.saltproject.io/en/latest/ref/auth/all/salt.auth.yubico.html