swaylock icon indicating copy to clipboard operation
swaylock copied to clipboard

Support 2FA pin code and password with security keys

Open NgoHuy opened this issue 2 years ago • 2 comments

Hi teams,

Thank for great application, I have use yubikey and setup login requires pin and password, but after I enter the pin, it sent to pam quickly, not required password.

The pam's setup is here:

$ cat /etc/pam.d/system-auth
#%PAM-1.0

auth      required pam_u2f.so pinverification=1 cue
#auth      sufficient pam_fprintd.so
auth      required  pam_unix.so     try_first_pass nullok

I think it should handle seperate pam module instead send pam quickly as enter first pass.

NgoHuy avatar Dec 14 '22 05:12 NgoHuy

You can already do this just modify /etc/pam.d/swaylock just like you did with system-auth

notmentaloutlaw avatar Feb 09 '23 21:02 notmentaloutlaw

You can already do this just modify /etc/pam.d/swaylock just like you did with system-auth

I did it before submitting the issue, it used first module then pass to pam handle

NgoHuy avatar Feb 10 '23 03:02 NgoHuy