Yubico Forum

Re: [Q?] OSX 10.10.5 permits login with wrong password

2015-09-16T13:59:31+01:00

You're right. I had rebuilt my mac and put the auth line in there, but had it set to

Code:

sufficient

instead of

Code:

required

Thanks for your help.

Statistics: Posted by nightcrawler086 — Wed Sep 16, 2015 1:59 pm

Re: [Q?] OSX 10.10.5 permits login with wrong password

2015-09-14T11:19:39+01:00

I am afraid your PAM module is not probably configured.

The Yubikey in Challenge Response mode should work without touch. It would be quite tricky to trigger the CR at will by pressing at the right time.

did you followed this:
https://developers.yubico.com/yubico-pa ... ponse.html

?

Statistics: Posted by Tom2 — Mon Sep 14, 2015 11:19 am

[Q?] OSX 10.10.5 permits login with wrong password

2015-09-13T22:11:31+01:00

I might be misunderstanding how this is supposed to work...

I'm running OSX 10.10.5 and use a set of yubikeys in CHAP mode for user login and for the screensaver.

I tried to log in to my machine today with the wrong password. When I touched my yubikey to send the challenge it let me log in, however I couldn't do much since that password wouldn't unlock my keychain.

I tried logging in again to make sure I wasn't mistaken (just typing a random string of characters) and it permitted me to log in again.

Is this how it's supposed to work when you change the relevant files in the /etc/pam.d directory? I was expecting it to verify my password and the challenge from my Yubikey to allow me to log in. It does not seem like this is happening.

Am I missing something?

Statistics: Posted by nightcrawler086 — Sun Sep 13, 2015 10:11 pm