pam-u2f icon indicating copy to clipboard operation
pam-u2f copied to clipboard

Option to show cue message if device is not found

Open joebonrichie opened this issue 6 years ago • 2 comments

This could be considered a duplicate of #57 but it would be great to have an option to always show the cue message regardless if a suitable key is found or not. I'm trying to provide a good OOTB user experience with minimal configuration. I understand the security implications of this.

Trying a combination of interactive and cue is unfortunately even more confusing - at least on lightdm and gdm as the interactive prompt is shown within the password box and the user has to press enter and then the button (if it exists) on their yubikey to continue. I also tried using a combination of nodetect and cue but with that the cue message won't be shown at all.

I'll try modifying 26f3046 to suit my needs for now, but it thought I'd make the issue as something to consider, thanks in advance!

joebonrichie avatar Nov 06 '18 17:11 joebonrichie

This would be very nice indeed! In SDDM (for KDE) I get a generic "Failed to authenticate" message if my U2F device isn't plugged in already.

nogweii avatar Jul 25 '19 00:07 nogweii

Here, it is an authentication failure even with the device already plugged in. Until I hit the button, that's when I'm going to get logged in nevertheless.

corbolais avatar Oct 05 '19 17:10 corbolais