On windows there is Windows Hallo with support for bio-metrics/pin/yubikey/smartphone app. Even if it's not a 1:1 alternative Im looking for something similar.

Is there any way to set up multi-factor authentication for Linux login (not ssh, local login) with support for using sudo etc to remove the need for entering a password?

Obviously fallback to password is acceptable. Usage of cloud services is OK as long as it's from a reputable and vendor.

Not for use at enterprise scale, just for a single workstation. Maybe yubikey is the only valid alternative with PAM? Would prefer using the smartphone for authentication since it's something i already have with me everywhere.

migrated from security.stackexchange.com Feb 11 at 12:57

This question came from our site for information security professionals.

  • I'm not sure I understand you thing with sudo and how it relates to passwordless logins. – Kusalananda Feb 11 at 13:16
  • Google authenticator+PAM configurations. – Rui F Ribeiro Feb 11 at 13:44

Most 2FA systems support radius, so pam-radius will allow you to add 2FA to almost all linux services. Here's a list of examples: https://www.wikidsystems.com/support/how-to/keyword/pam-radius/.

  • Seems like radius is the way to go, thank you :) – Wrexthor Feb 14 at 10:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.