4 ms·
As a side note, there's also the wonderful pam_yubiko module that allows you to require touching your yubikey to sudo or login.
by Galanwe 6y ago
As a side note, there's also the wonderful pam_yubiko module that allows you to require touching your yubikey to sudo or login.
- sammorrowdrums 6y agoYes, use this on my Linux machine. Works seamlessly.
- sdoering 6y agowow... thanks for that. Didn't know that. Will need to read on that as well...
- tomxor 6y agopam_yubico yes. You can also use this to secure SSHD on servers by delegating to PAM with keyboard-interactive. I'm waiting for U2F OpenSSH support to trickle down to stable distros but in the meantime pam_yubico is pretty damn good... not to mention you don't have to worry about terminal support since it relies on the yubikey OTP emulating a keyboard.