Rublon

Secure Remote Access

By

Last updated on October 1, 2026

Rublon MFA for Linux SSH integrates with Linux Desktop and Server distributions like CentOS, Debian, Ubuntu, and others to add multi-factor authentication (MFA) to every remote or local SSH login using a PAM module.

Version 2.3.5 – October 2, 2026

  • Added Append Mode, allowing users to append an MFA method name or code to their password. Requires manual configuration of pam_rublon_append.so at the beginning of the PAM authentication stack, before primary authentication. The existing pam_rublon.so module remains in place.
  • Added Offline Mode for local Mobile Passcode verification when the Rublon API cannot be reached. Disabled by default. Requires offlineBypass=true, an SSH session that supports interactive authentication, and an offline secret saved during a previous successful online MFA login on the same machine.
  • Enforced TLS 1.2 or later for connections to the Rublon API.
  • Strengthened authentication transaction ID validation.
  • Prevented passwords and authentication tokens from being written to connector logs and tightened permissions on configuration and log files.
  • Fixed SELinux policy issues that could prevent the connector from connecting to the Rublon API.
  • Fixed an issue that caused incorrect host names to be sent to the Rublon API.
  • Fixed RPM package scripts that could remove the connector configuration and PAM entries during updates or reinstallation. To preserve existing configuration when updating an older installation, follow the update procedure in the Rublon MFA for Linux SSH documentation.

Version 2.3.2 – August 13, 2025

  • Added the ability to override connector settings per PAM service. Rublon can now read module options directly from the relevant pam.d configuration entry, letting you apply different policies for services such as sshd, sudo, or su
  • Fixed the connector not reporting the host IP when elevating privileges via sudo/su
  • Fixed login issue on Veritas NetBackup 11
  • Fixed a permissions issue affecting the Rublon configuration file to ensure secure defaults

Version 2.3.1 – July 18, 2025

  • Refined failMode logic so that behavior now consistently follows the configuration
  • Unified proxy options to be case-insensitive
  • Cleaned up logs

Version 2.3.0 – June 26, 2025

  • Added HTTP proxy support

Version 2.2.0 – January 23, 2025

  • Added a new nonInteractiveMode option. When enabled, the connector automatically chooses the first supported method by sequentially attempting methods in a pre-defined order
  • Simplified SSH key authentication configuration. You can now easily set up SSH key authentication by running a script

Version 2.1.0 – November 19, 2024

  • Added support for the Phone Call authentication method

Version 2.0.4 – October 11, 2024

  • Integrated Rublon MFA for Veritas NetBackup capabilities into Rublon MFA for Linux SSH modules. Now, all Linux SSH packages work with Veritas
  • Added support for openSUSE Leap / SUSE Linux Enterprise Server 15 SP3
  • Added support for the SMS Link authentication method during Veritas NetBackup MFA
  • Fixed minor memory issues
  • Users can now simply run yum -y install rublon.rpm and complete their Veritas configuration without having to follow extensive documentation. (RHEL/ALMA/Rocky only)

Version 2.0.3 – July 24, 2024

  • Expanded supported operating systems to Ubuntu 18.04 and Red Hat / CentOS / Alma / Rocky (8, 9)

Version 2.0.0 – June 17, 2024

  • Adapted to Usernames
  • Upgraded the connector in terms of user experience and performance
  • Made the connector more lightweight and efficient
  • Added support for the SMS Link authentication method
  • Added support for the YubiKey OTP authentication method
  • Expanded supported operating systems to Debian (11, 12), Ubuntu (20.04, 22.04, 24.04)

Version 1.5 – March 22, 2021

  • Added a new autopushPrompt option. When enabled, a message is displayed informing that a push notification has been sent to the user

Version 1.4 – March 22, 2021

Version 1.3 – March 4, 2021

  • Improved handling of authentication methods
  • CentOS 6 no longer supported
  • Removed Terms of Service acceptance prompt

Version 1.2 – May 14, 2020

  • Support for Ubuntu 20.04
  • Optional event logger
  • Security improvements for QR code methods
  • Improved communication with the Rublon server

Version 1.1.3 – April 02, 2020

  • New prompt option (number of repeated login attempts)
  • TOTP security method issues improved
  • New failmode option

Version 1.1.2 March 23.2020

  • New offlineBypass option
  • New autopush option
  • Security improvements for QR code, push and email methods
  • Support for Debian 10

Version 1.1.1 January 13.2020

  • Security improvements related to logging in using a mobile application
  • Support for Debian 8, Debian 9, Centos 8 and RedHat 8

Version 1.1 November 12.2019

  • New application installer
  • Security improvements for bypass mode
  • Support for SELinux
  • Support for Centos 6

Version 1.0.4 September 11.2019

  • UX changes
  • Security improvements for the QR code method

Version 1.0.3 August 20.2019

  • Security improvements for SMS and TOTP methods

Version 1.0.2 August 05.2019

  • New join scenario for the Rublon Admin Console users

Version 1.0.1 July 15.2019

  • New timeout for the SSH login session
  • Support for Ubuntu 16.04

Version 1.0 May 10.2019

  • First version of Rublon Linux SSH that enables multi-factor authentication for SSH connection on Linux Ubuntu 18.04

Related Posts

Rublon for SSH (Linux)