5 ms·

Any way to do it with an older type of USB token? Like Safenet eTokens?

• qbasic_forever 6y ago
  The auto lock on device removal with udev rule would be the same idea, in fact you could use any USB device like a basic flash drive if you wanted. Changing PAM's login to use the device for login would require a bit more device-specific stuff--I'd search around to see if Safenet already provides a module to drive PAM auth.
  • logix 6y ago
    This pam_usb fork can be used to set up any USB for authentication: https://www.linuxuprising.com/2021/02/how-to-login-with-usb-flash-drive.html https://www.linuxuprising.com/2021/02/how-to-login-with-usb-...
    • marianov 6y ago
      This are PKI tokens, like smartcards. I would like something tied to a certificate and private key on the device. That would be unforgeable