PingID Administration Guide

Configuration example of ForceCommand for Ubuntu/Debian

This is an example configuration of PingID SSH for ForceCommand on Ubuntu and Debian distributions.

About this task

This process assumes that you specified --prefix=/usr in the configure command or installed from the binary package.

Steps

  1. Edit the sshd_config file.

    sudo vi /etc/ssh/sshd_config

    1. Add the following lines to the end of the file.

      #enable pingid for all users
ForceCommand /usr/sbin/pingid_fc

    Disable PermitTunnel and AllowTcpForwarding in the sshd_config file because tunneling and port forwarding are performed before PingID authentication is triggered.

  2. To apply the changes and activate PingID MFA integration with SSH, restart the sshd service.

    sudo service sshd restart