Yubico Forum

View unanswered posts | View active topics

Board index » Yubico Software » Computer Logon - Windows | Linux | MacOS | freeBSD

All times are UTC + 1 hour

sudo command in OS X authorizes without key

Page 1 of 1

[ 2 posts ]

Print view

Previous topic | Next topic

Author

Message

ZIm

Post subject: sudo command in OS X authorizes without key

Posted: Thu Jan 07, 2016 10:28 pm

Joined: Thu Jan 07, 2016 10:20 pm
Posts: 1

I have just configured my OS X El Capitan for 2 factor authentication. It works for logins and authenticating features that require to unlock the lock icon in system settings. What i did notice tho is that the sudo command authenticates without the yubikey in the usb port. Is there a special setting for this? Isn't adding yubico_pam.so in /etc/pam.d/authorization supposed to protect all authorization in OS X?

Top

Share On:
	Facebook		Twitter		Tumblr		Google+

bmorgenthaler

Post subject: Re: sudo command in OS X authorizes without key

Posted: Fri Jan 15, 2016 11:56 pm

Joined: Tue Nov 25, 2008 9:25 pm
Posts: 8

Sudo has it's own pam configuration module. I have pam_yubico configured in the following locations:

Code:

$ grep yubi /etc/pam.d/*
/etc/pam.d/authorization:auth       required       pam_yubico.so mode=challenge-response
/etc/pam.d/screensaver:auth       required       pam_yubico.so mode=challenge-response
/etc/pam.d/sudo:auth       required       pam_yubico.so mode=challenge-response

This covers logins (not filevault), screensaver and sudo.

Top

Page 1 of 1

[ 2 posts ]

Board index » Yubico Software » Computer Logon - Windows | Linux | MacOS | freeBSD

All times are UTC + 1 hour

Who is online

Users browsing this forum: No registered users and 1 guest

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

sudo command in OS X authorizes without key

Share On:

Who is online