22 lines
847 B
Text
22 lines
847 B
Text
|
pam_url:
|
||
|
|
{
|
||
|
|
settings:
|
||
|
|
{
|
||
|
|
url = "https://fas-all.phx2.fedoraproject.org:8443/"; # URI to fetch
|
||
|
|
returncode = "OK"; # The remote script/cgi should return a 200 http code and this string as its only results
|
||
|
|
userfield = "user"; # userfield name to send
|
||
|
|
passwdfield = "token"; # passwdfield name to send
|
||
|
|
extradata = "&do=login"; # extradata to send
|
||
|
|
prompt = "Password+Token: "; # password prompt
|
||
|
|
};
|
||
|
|
|
||
|
|
ssl:
|
||
|
|
{
|
||
|
|
verify_peer = true; # Should we verify SSL ?
|
||
|
|
verify_host = true; # Should we verify the CN in the SSL cert?
|
||
|
|
client_cert = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side certificate
|
||
|
|
client_key = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side key (can be same file as above if a single cert)
|
||
|
|
ca_cert = "/etc/pki/tls/private/totpcgi-ca.cert";
|
||
|
|
};
|
||
|
|
};
|