mirror of
https://github.com/Yubico/yubico-pam.git
synced 2025-02-08 03:54:18 +01:00
Merge branch 'pr-153'
This commit is contained in:
commit
0089f810c7
@ -11,9 +11,9 @@ in the current user's home directory (`$HOME/.yubico/challenge-123456`
|
|||||||
for a YubiKey with serial number API readout enabled, and
|
for a YubiKey with serial number API readout enabled, and
|
||||||
`$HOME/.yubico/challenge` for one without).
|
`$HOME/.yubico/challenge` for one without).
|
||||||
|
|
||||||
The PAM module supports a system wide directory for these state files
|
The PAM module supports a system-wide directory for these state files
|
||||||
(in case the user's home directories are encrypted), but in a system
|
(in case the user's home directories are encrypted), but in a system-wide
|
||||||
wide directory, the 'challenge' part should be replaced with the
|
directory, the 'challenge' part should be replaced with the
|
||||||
username. Example: `/var/yubico/alice-123456`.
|
username. Example: `/var/yubico/alice-123456`.
|
||||||
|
|
||||||
To use the system-wide mode, you currently have to move the generated
|
To use the system-wide mode, you currently have to move the generated
|
||||||
|
@ -8,7 +8,7 @@ auth required pam_unix.so use_first_pass
|
|||||||
----
|
----
|
||||||
|
|
||||||
The first line makes pam_yubico check the OTP. Use either a per-user
|
The first line makes pam_yubico check the OTP. Use either a per-user
|
||||||
file called `~/.yubico/authorized_yubikeys`, or a system wide file called
|
file called `~/.yubico/authorized_yubikeys`, or a system-wide file called
|
||||||
`/etc/yubikey_mappings` to specify which Yubikeys that can be used to log
|
`/etc/yubikey_mappings` to specify which Yubikeys that can be used to log
|
||||||
in as specific users. See https://developers.yubico.com/yubico-pam[the README]
|
in as specific users. See https://developers.yubico.com/yubico-pam[the README]
|
||||||
for more information.
|
for more information.
|
||||||
|
4
util.c
4
util.c
@ -56,7 +56,7 @@ int
|
|||||||
get_user_cfgfile_path(const char *common_path, const char *filename, const struct passwd *user, char **fn)
|
get_user_cfgfile_path(const char *common_path, const char *filename, const struct passwd *user, char **fn)
|
||||||
{
|
{
|
||||||
/* Getting file from user home directory, e.g. ~/.yubico/challenge, or
|
/* Getting file from user home directory, e.g. ~/.yubico/challenge, or
|
||||||
* from a system wide directory.
|
* from a system-wide directory.
|
||||||
*
|
*
|
||||||
* Format is hex(challenge):hex(response):slot num
|
* Format is hex(challenge):hex(response):slot num
|
||||||
*/
|
*/
|
||||||
@ -359,7 +359,7 @@ int
|
|||||||
get_user_challenge_file(YK_KEY *yk, const char *chalresp_path, const struct passwd *user, char **fn, FILE *debug_file)
|
get_user_challenge_file(YK_KEY *yk, const char *chalresp_path, const struct passwd *user, char **fn, FILE *debug_file)
|
||||||
{
|
{
|
||||||
/* Getting file from user home directory, i.e. ~/.yubico/challenge, or
|
/* Getting file from user home directory, i.e. ~/.yubico/challenge, or
|
||||||
* from a system wide directory.
|
* from a system-wide directory.
|
||||||
*/
|
*/
|
||||||
|
|
||||||
/* The challenge to use is located in a file in the user's home directory,
|
/* The challenge to use is located in a file in the user's home directory,
|
||||||
|
Loading…
x
Reference in New Issue
Block a user