Yubico Forum

Hi,

I've successfully installed and configured Yubico PAM to use two YubiKeys for a local Mac User (10.9) in challenge-response mode (Login, Screensaver and sudo for now).

Problem: now other local users cannot login, because they don't have a challenge-response pair yet

How do I setup Yubico PAM for those other users (I can login to them via terminal)?

Thanks!
Frank

http://opensource.yubico.com/yubico-pam/

Create a /etc/yubikey_mappings, the file must contain a user name and the Yubikey token ID separated by colons (same format as the passwd file) for each user you want to allow onto the system using a Yubikey.

The mappings should look like this, one per line:

<first user name>:<Yubikey token ID1>:<Yubikey token ID2>:….
<second user name>:<Yubikey token ID3>:<Yubikey token ID4>:….

_________________
-Tom

Thanks Tom, but I thought this would only apply to OTP method but not to challenge-response (at least, I got it working without any mappings) ?

In the meantime I found a workaround by copying challenge-response pairs to the other local users' directories, immediately after configuring authorization PAM from the local admin user's account:

Plus chown to user2 and repeating it for all other YubiKeys of that user.