Wednesday, April 25. 2007Local PAM authentication for USB storage devicesTrackbacks
Trackback specific URI for this entry
No Trackbacks
Comments
Display comments as
(Linear | Threaded)
Could you please describe how the software gets the keys from the usbdrive?
I use pam_usb for auth but I noticed it uses hal and dbus for mounting, getting the key, updating "one time pads" and unmounting which is bad if it is required in PAM and dbus or hal breaks... And please describe the advantages of pam_usbauth over pam_usb. Thank you in advance.
Of course. Running "make" also installs a manpage on your system, where uapasswd is described in more detail. I hope this few steps are suitable for your needs.
I encountered a problem - whatever I tried to do, it was impossible to access the device:
Apr 25 21:58:48 trottel [pam_usbauth]: Found password blah for user ja Apr 25 21:58:48 trottel [pam_usbauth]: Adding device /dev/sdb1 Apr 25 21:58:48 trottel [pam_usbauth]: devcnt: 1 Apr 25 21:58:48 trottel [pam_usbauth]: Error accessing given device /dev/sdb1 Apr 25 21:58:48 trottel [pam_usbauth]: Denying access to user ja reading the partition header reveals the following: trottel ~ # cat /dev/sdb1 | head -c 6 blahx trottel ~ # Any solution for my problem? johannes
For which application is it for? I'm currently just having this problem when trying to authenticate Xscreensaver. All others seem to work fine (su, sudo, ssh, gdm, kdm, login et al) here.
Please be sure to only use uapasswd with the -P switch instead of -p, otherwise passwords would be saved in cleartext -- this should basically only be used for debugging reasons.
It's a simple system-auth via login or gdm - I always get this message
johannes
I'm afraid this could be a bug within the old parser engine, you may find version 0.3 more stable (already packaged at usbauth.delta-xi.net).
It works perfectly
hi!
/etc/usbauth.conf is per default world-readable. please fix! //richard
No, you don't have to type the password if you put pam_usbauth.so before pam_unix.so in /etc/pam.d/.
But if pam_unix.so is used before, it's enough to give an empty password, because then pam_unix.so will fail, and pam_usbauth is getting called by PAM. |
ArchivesDX Datasources & LinksDivisionsBlog AdministrationStatistics28 entries
|