pam-u2f
pam-u2f copied to clipboard
Pluggable Authentication Module (PAM) for U2F and FIDO2
I have an impression having version 4 key (without PIN support) listed before PIN enabled key in u2f_keys file is causing authentication with PIN required to fail for those keys...
* Added localization frameworks with gettext * Added translation of Simplified Chinese and Japanese
Currently, pam_u2f reads all parameters from pam configuration. Those options that are not affecting the behavior on the PAM stack itself but are only affecting internal pam_u2f behaviors (such as...
This may be related to #152 , As the title suggests, it would be nice to have the ${USER} variable expansion in the `authfile` module argument to allow for multiple...
- Run "sudo -s" - See "Please touch the device" prompt - Press Ctrl+C to change your mind and abort. Expected: command is aborted immediately Actual: command hangs until you...
I have the following at the top of `/etc/pam.d/common-auth`: ``` auth sufficient pam_u2f.so cue [cue_prompt=Please touch your YubiKey.] pinverification=1 ``` When entering the wrong PIN, the cue prompt still appears,...
This could be considered a duplicate of #57 but it would be great to have an option to always show the cue message regardless if a suitable key is found...
Hi, love your work so far. I'm using a yubico security key and to complete the user experience it would be great if feedback from interactive and cue messages would...
**What version of libfido2 are you using?** not sure **What operating system are you running?** Peppermint OS **What application are you using in conjunction with libfido2?** fred@fred-Aspire-one-1-132 ~ $ pamu2fcfg...
When you use the debug option, libfido2 is initialized with FIDO_DEBUG, which sends debug output to stderr by default. This is impractical, debug output should go wherever the PAM debug...