FreeRadius+GoogleAuthenticator+华为sslvpn动态口令认证登录

最新推荐文章于 2024-05-10 09:42:55 发布

木木40999

最新推荐文章于 2024-05-10 09:42:55 发布

阅读量3.8k

点赞数

分类专栏：网络文章标签：安全运维 centos

本文链接：https://blog.csdn.net/weixin_41296628/article/details/116152092

版权

FreeRadius+GoogleAuthenticator+华为sslvpn动态口令认证登录

1. 手机安装google身份验证器

安卓手机：https://google-authenticator.en.softonic.com/android/download

苹果手机：应用商城下载google authenticator

2. centos服务器yum源更换成阿里的镜像源

cd /etc/yum.repos.d/
wget http://mirrors.aliyun.com/repo/Centos-7.repo
yum clean all
yum makecache

3. NTP安装

由于Google Authenticator依赖于时间，所以服务器系统时间必须正确。

yum install ntp -y
systemctl enable ntpd --now

4. Google Authenticator Pam安装配置

yum install git pam-devel libtool -y

git clone https://github.com/google/google-authenticator-libpam.git

cd google-authenticator-libpam/

./bootstrap.sh
./configure
make -j && make install

ln -s /usr/local/lib/security/pam_google_authenticator.so /usr/lib64/security/pam_google_authenticator.so

echo 'LD_LIBRARY_PATH=/usr/local/lib/security:$LD_LIBRARY_PATH' >> /etc/profile
echo 'LD_RUN_PATH=/usr/local/lib/security:$LD_RUN_PATH' >> /etc/prof