You are not logged in.

#1 2021-01-13 21:59:57

Ryaniskira
Member
Registered: 2020-07-26
Posts: 12

[Solved] Pam-u2f prompt

I set up my Yubikey to enable passwordless sudo via pam-u2f and it works great, the only issue is that when something is waiting for sudo elevation the shell just sits there and sometimes I don't realize that it's waiting for my Yubikey (my Yubikey is not directly visible so I don't see it flashing, my desk has a "shelf" of sorts under the main surface and above the actual cabinets and that's where I have USB hubs and other stuff) so sometimes sudo times out. I am wondering if there's a way to have it prompt with "Tap your key" or "Tap your Yubikey for sudo" so that that a process is asking for sudo? I know Lightdm and other things are able to prompt you to tap, press, etc your u2f device so I am wondering if there is a way to do it for sudo.

Last edited by Ryaniskira (2021-01-15 01:49:09)

Offline

#2 2021-01-14 13:24:58

Nickolas0
Member
Registered: 2019-02-16
Posts: 30

Re: [Solved] Pam-u2f prompt

You can use "cue" option in your pam config, see manpage for details: https://man.archlinux.org/man/community … m_u2f.8.en

There is also https://archlinux.org/packages/communit … -detector/

Offline

#3 2021-01-15 01:48:24

Ryaniskira
Member
Registered: 2020-07-26
Posts: 12

Re: [Solved] Pam-u2f prompt

I glanced over the manpage I don't know how I missed that, thank you.

Offline

Board footer

Powered by FluxBB