search

Yubico / pam-u2f

Pluggable Authentication Module (PAM) for U2F and FIDO2
https://developers.yubico.com/pam-u2f/
BSD 2-Clause "Simplified" License
532 stars 76 forks source link

Option to show cue message if device is not found #107

Open joebonrichie opened 5 years ago

joebonrichie commented 5 years ago

This could be considered a duplicate of #57 but it would be great to have an option to always show the cue message regardless if a suitable key is found or not. I'm trying to provide a good OOTB user experience with minimal configuration. I understand the security implications of this.

Trying a combination of interactive and cue is unfortunately even more confusing - at least on lightdm and gdm as the interactive prompt is shown within the password box and the user has to press enter and then the button (if it exists) on their yubikey to continue. I also tried using a combination of nodetect and cue but with that the cue message won't be shown at all.

I'll try modifying 26f3046 to suit my needs for now, but it thought I'd make the issue as something to consider, thanks in advance!

nogweii commented 5 years ago

This would be very nice indeed! In SDDM (for KDE) I get a generic "Failed to authenticate" message if my U2F device isn't plugged in already.

corbolais commented 4 years ago

Here, it is an authentication failure even with the device already plugged in. Until I hit the button, that's when I'm going to get logged in nevertheless.