pam-u2f
pam-u2f copied to clipboard
Option to show cue message if device is not found
This could be considered a duplicate of #57 but it would be great to have an option to always show the cue message regardless if a suitable key is found or not. I'm trying to provide a good OOTB user experience with minimal configuration. I understand the security implications of this.
Trying a combination of interactive
and cue
is unfortunately even more confusing - at least on lightdm
and gdm
as the interactive prompt is shown within the password box and the user has to press enter and then the button (if it exists) on their yubikey to continue. I also tried using a combination of nodetect
and cue
but with that the cue message won't be shown at all.
I'll try modifying 26f3046 to suit my needs for now, but it thought I'd make the issue as something to consider, thanks in advance!
This would be very nice indeed! In SDDM (for KDE) I get a generic "Failed to authenticate" message if my U2F device isn't plugged in already.
Here, it is an authentication failure even with the device already plugged in. Until I hit the button, that's when I'm going to get logged in nevertheless.