Hello folks (sorry I hadn't realized there was a logon forum (this is also posted on a different forum as well)),
I recently configured my Macbook Pro running OSX 10.8.4 and was able to configure login (/etc/pam.d/authorization) and sudo (/etc/pam.d/sudo). I'll probably configure further but this is good enough for now. PAM works great and is easy to configure. No problem there.
I'm looking to do the same on my older 2007 iMac running OSX Snow Leopard 10.6.8 (I can't upgrade much further because of various considerations but I like 10.6.8 anyways so that box is gonna die on 10.6.8
) and was able to configure sudo (/etc/pam.d/sudo) similarly to what I did on OSX 10.8.4.But login authentication seems to be configured differently than through PAM (I'm gathering via /etc/authorization rather than /etc/pam.d/authorization) using an entirely different configuration model which I'm not very familiar with. I've worked with PAM a bit before so it was easy to navigate but I'm not finding what I'm looking for looking for on the net for /etc/authorize configuration vs PAM on yubikey HMAC-SHA1 challenge-response for Snow Leopard. I got some hits on for Kerberos authentication on Snow Leopard but it didn't give me much other than pointing me in the direction of /etc/authorization.
Is there an already pre-chewed configuration I can use for /etc/authorization to make my yubikey PAM authenticate on login in the same capacity as with /etc/pam.d/ via:
auth required pam_yubico.so mode=challenge-response
Any pointer would be greatly appreciated.
Regards
Jeff