I'm trying to configure DUO on CentOS and following these steps:
1.- Modification /etc/duo/pam_duo.conf
[duo]
; Duo integration key
ikey = INTEGRATION_KEY
; Duo secret key
skey = SECRET_KEY
; Duo API hostname
host = API_HOSTNAME
2.- Update /etc/ssh/sshd_config
PubkeyAuthentication no
PasswordAuthentication no
UsePAM yes
ChallengeResponseAuthentication yes
UseDNS no
AuthenticationMethods keyboard-interactive
3.- update /etc/pam.d/sshd
#%PAM-1.0
#auth required pam_sepermit.so
#auth substack password-auth
auth required pam_env.so
auth requisite pam_unix.so nullok try_first_pass
auth sufficient /lib64/security/pam_duo.so
auth required pam_deny.so
auth include postlogin
4.- update /etc/pam.d/system-auth
auth required pam_env.so
auth required pam_faildelay.so delay=2000000
#auth sufficient pam_unix.so nullok try_first_pass
auth required pam_unix.so nullok try_first_pass
auth sufficient /lib64/security/pam_duo.so
auth requisite pam_succeed_if.so uid >= 1000 quiet_success
auth required pam_deny.so
SSH access works, but for SFTP (WinSCP, FileZilla) it doesn't prompt me for push or SMS.
How can I configure it?
