search

Yubico / yubico-pam

Yubico Pluggable Authentication Module (PAM)
https://developers.yubico.com/yubico-pam
BSD 2-Clause "Simplified" License
690 stars 114 forks source link

Multiple keys per user #241

Closed twz123 closed 2 years ago

twz123 commented 2 years ago

I'd like to be able to use multiple keys to authenticate (i.e. have a backup key in case one gets lost / breaks). The documentation mentions that a user's mapping file must have only one line. I verified that putting a second line in there makes authentication impossible with either key.

Would it be possible to add multi-key support? Are there any other workarounds for recovery?

mrclschstr commented 2 years ago

Use the scheme like mentioned in the docs: <user name>:<YubiKey token ID1>:<YubiKey token ID2>

One line per user and separate the Yubikey IDs with a colon.

twz123 commented 2 years ago

Oh gosh. Reading the manual and really reading the manual seem to be two distinct things for me. Thanks for pointing out and sorry for the noise.