Unbuntu Authentication via pam

[jomedusa]

We are attempting to implement 2 factor authentication on Unbuntu and we are not seeing any attempts.  When we perform the ace test it comes back as successful.  We have followed the documentation that is present on this forum/KB but have not been able to make it work.  When performing the ace test we see successful authentication with the RSA Security Console but it doesn't appear that ssh is using the pam config.

We have this working within Centos and REHL without issues but not Unbuntu.

Any help would be appreciated.

Thanks,

Joe

[EricaChalfin]

@jomedusa,

Weclome to the RSA community! We are so glad you have joined us!

Some questions for you:

• On what version of Ubuntu are you installing the PAM agent?
• What version of the RSA Authentication Agent for PAM have you installed ( Authentication Agent 8.1.3 for PAM or MFA Agent 9.0 for PAM)?
• Are you installing the UDP or REST version of the agent?

What messages are you seeing in the authentication activity monitor? Please be sure not to post any personal information like user IDs, OTP serial numbers, IP addresses, etc.

We have seen that for customers who have applied hardening to the server on which they are installed the agent, that they can get acetest to work but regular authentication will fail.  If you have applied hardening, please be sure to stand up a vanilla server running a supported version of Ubuntu, install the agent and test authentication again.

If things still are not working, please be sure to contact technical support and we will be happy to assist you.