PingID Administration Guide

Configuration example of ForceCommand for Red Hat

This is an example configuration of PingID SSH for ForceCommand on Red Hat.

About this task

This process assumes that you specified --prefix=/usr in the configure command.

Steps

  1. Edit the sshd_config file.

    sudo vi /etc/ssh/sshd_config
    1. Add pingid_fc with its full path.

      Match User joe
      ForceCommand /usr/sbin/pingid_fc

    Disable PermitTunnel and AllowTcpForwarding in the sshd_config file because tunneling and port forwarding are performed before PingID authentication is triggered.

  2. To apply the changes and activate PingID MFA integration with SSH, restart the sshd service.

    sudo service sshd restart