Manual Provision of keys

In this menu you can add/delete and list user to Yubikey bindings.

┌────────────────────────────────────────────────────────────────────────────┐
│            Manual Provisioning on xx (Version 2.x.x build xxxx)            │
└────────────────────────────────────────────────────────────────────────────┘

┌─┬──────────────────────────────────────────────────────────────────────────┐
│1│List YubicoID to User bindings                                            │
│2│Add YubicoID to User bindings                                             │
│3│Delete YubicoID to User bindings                                          │
└─┴──────────────────────────────────────────────────────────────────────────┘

Move the cursor or enter a it's corresponding number (Q to Quit)

Main> Modules> Radius> Settings> ManProv>

List User Bindings

Basically just list all bindings.

Add User Bindings

You need:

  1. The username

  2. A press from the users Yubikey, or the yubikeys id string (first 12 chars)

Note

You might encounter service accounts that need to authenticate without OTP, these accounts can be configured with the “yubikey id” of “otp-bypassed” which will enable OTP-Bypass for that user in order for that account to be able to authenticate without a yubikey. This will only work in concatenated mode.

Delete User Binding

Supply the ID of the binding you desire to delete.