sudo-touchid icon indicating copy to clipboard operation
sudo-touchid copied to clipboard

Don't works with Sonoma

Open misterbuchi opened this issue 1 year ago • 3 comments

Hi,

Thanks for your work. on my device, your great program doesn't works anymore. I am on a apple silicon mac. and i have done the install with homebrew.

misterbuchi avatar Oct 10 '23 05:10 misterbuchi

I also ran into problems sudo-touchid and Sonoma, but turns out it's not necessary on Sonoma anymore and Touch ID for sudo can be made to survive OS updates like this:

  • open terminal
  • cd /etc/pam.d
  • copy the provided template to the actual file pam will read with sudo cp sudo_local.template sudo_local
  • edit the file with sudo pico sudo_local (or whatever editor you prefer)
  • remove the # from the start of the line with auth sufficient pam_tid.so
  • Save file (for Pico it's Ctrl-X, type Y, hit enter)
  • you're done!

ORBAT avatar Oct 30 '23 00:10 ORBAT

I also ran into problems sudo-touchid and Sonoma, but turns out it's not necessary on Sonoma anymore and Touch ID for sudo can be made to survive OS updates like this:

  • open terminal
  • cd /etc/pam.d
  • copy the provided template to the actual file pam will read with sudo cp sudo_local.template sudo_local
  • edit the file with sudo pico sudo_local (or whatever editor you prefer)
  • remove the # from the start of the line with auth sufficient pam_tid.so
  • Save file (for Pico it's Ctrl-X, type Y, hit enter)
  • you're done!

Both sudo-touchid stopped working for me and proposed above way also doesn't work , tried reboots/brew reinstalls - always ask for password. No idea...

> sudo echo "check tid"
Password:
sudo: a password is required

> cat /etc/pam.d/sudo_local
# sudo_local: local config file which survives system update and is included for sudo
# uncomment following line to enable Touch ID for sudo
auth       sufficient     pam_tid.so

artk42 avatar Feb 21 '24 15:02 artk42

I also ran into problems sudo-touchid and Sonoma, but turns out it's not necessary on Sonoma anymore and Touch ID for sudo can be made to survive OS updates like this:

  • open terminal
  • cd /etc/pam.d
  • copy the provided template to the actual file pam will read with sudo cp sudo_local.template sudo_local
  • edit the file with sudo pico sudo_local (or whatever editor you prefer)
  • remove the # from the start of the line with auth sufficient pam_tid.so
  • Save file (for Pico it's Ctrl-X, type Y, hit enter)
  • you're done!

Both sudo-touchid stopped working for me and proposed above way also doesn't work , tried reboots/brew reinstalls - always ask for password. No idea...

> sudo echo "check tid"
Password:
sudo: a password is required

> cat /etc/pam.d/sudo_local
# sudo_local: local config file which survives system update and is included for sudo
# uncomment following line to enable Touch ID for sudo
auth       sufficient     pam_tid.so

Ok, I've occasionally found out the issue! Unlock with Apple Watch was turned on and overriding with password request (that is useless, but was sitting on silently). So that when sudo-touchid sterilized itself, then watch unlock became prioritized and thus everything stopped working for me. So, as a rule of thumb: Turn off "Unlock with Apple Watch"

artk42 avatar Feb 23 '24 10:02 artk42