# salt.auth.yubico

Provide authentication using YubiKey.

Added in version 2015.5.0.

depends:

  yubico-client Python module

To get your YubiKey API key you will need to visit the website below.

https://upgrade.yubico.com/getapikey/

The resulting page will show the generated Client ID (aka AuthID or API ID) and the generated API key (Secret Key). Make a note of both and use these two values in your /etc/salt/master configuration.

> /etc/salt/master

>     yubico_users:
>       damian:
>         id: 12345
>         key: ABCDEFGHIJKLMNOPQRSTUVWXYZ

>     external_auth:
>       yubico:
>         damian:
>           - test.*

Please wait five to ten minutes after generating the key before testing so that the API key will be updated on all the YubiCloud servers.

salt.auth.yubico.auth(username, password)

  Authenticate against yubico server

salt.auth.yubico.groups(username, *args, **kwargs)