Ironchip Linux

IDENTITY PROTECTION

Elevate your cybersecurity strategy with Ironchip Identity Platform, designed to bring the power of Multi-Factor Authentication (MFA) to your desktop computing environment. Know more.

Role-based privilege management: Set different user privileges to prevent unauthorized users from misusing the system.

Restrict access from unauthorized places: Limit access to authorized areas for enhanced security.

Supervision of accesses in real time: Monitor user activity, view access history, generate reports, and download them for complete control.

Intrusion detection system (IDS): Receive alerts for SIM swapping, phishing, device switching, and more.

---

Download

Download the latest Ironchip PAM module for Linux (.so file):

---

Basic Usage

Once you've downloaded the .so file:

1. Move it to a secure directory:

   sudo mv pam_ironchip_auth.so /usr/local/lib/security/

2. Edit your desired PAM configuration file (e.g., /etc/pam.d/sudo) and add:

   auth required /usr/local/lib/security/pam_ironchip_auth.so host=https://api.ironchip.com api_key=<your_api_key>

3. Save and close the file (Ctrl+O, Enter, Ctrl+X if using nano).

4. Assign access from the Ironchip Dashboard.

---

Ironchip PAM for Linux

What it is

This PAM module integrates Ironchip Multi-Factor Authentication (MFA) into the Linux login flow, administrator actions (sudo), SSH sessions, and more.

---

Installation & Configuration

Important: This process can cause permanent system and user locks if not executed correctly. Keep a terminal with administrator permissions open during the process to avoid any irreparable error. It is recommended to first test the integration with sudo authentication to avoid being locked out of the system.

Step 1: Install dependencies (if needed)

Run the following command to install required packages:

sudo apt-get install libcurl4-openssl-dev libpam-dev uuid-dev

Step 2: Create PAM directory

Create a secure directory to store the module:

sudo mkdir -p /usr/local/lib/security

Step 3: Move PAM module

Move the downloaded PAM module into the new directory:

sudo mv pam_ironchip_auth.so /usr/local/lib/security/

Step 4: Configure PAM

Go to /etc/pam.d/ and edit one of the following files depending on your needs:

• sudo: authentication for sudo commands
• sshd: authentication for remote SSH
• gdm-password: authentication for login GUI
• common-auth: apply authentication system-wide

Example: Add MFA to sudo

sudo nano /etc/pam.d/sudo

Add the following line at the top:

auth required /usr/local/lib/security/pam_ironchip_auth.so host=https://api.ironchip.com api_key=<your_api_key>

Replace <your_api_key> with the actual key provided by Ironchip.

Save and exit: Ctrl+O, Enter, then Ctrl+X.

---

Uninstall / Revert

To remove Ironchip PAM integration:

1. Remove the added line from the modified /etc/pam.d/ file.
2. Delete the PAM module:

sudo rm /usr/local/lib/security/pam_ironchip_auth.so

---

📘 Documentation

For more information and advanced options, visit the Ironchip Linux documentation.