Yubico Forum

Hi Board members,

got my YubiKey Neo today. The device works fine with Gmail, LastPass and Dropbox. I tried to setup the YubiKey as an access token following the official guide [1]. I followed every step of the guide except the time machine backup.

My problem
After the configure of the OS X user account I rebooted my Mac (OS X El Capitan) and was unable to log in. When I input the password the system shows a progress bar which leads me to another login screen. When I input the password the system denies access to the system. Maybe I am accessing the system wrong. I have no clue what went wrong.

My attempt to solve the issue

1. started the Mac in recovery mode
2. opened terminal to edit pam.d
3. decrypted the hard disk
4. was not able o use sudo
5. was not able to edit authorization

Is there a way to delete the line "auth required pam_yubico.so mode=challenge-response"?

Best regard,
Phil

[1] https://www.yubico.com/wp-content/uploa ... -Login.pdf

It's probably easiest to choose "Re-install OS X" from Recovery Mode. The process takes roughly an hour and will re-install your system files (and replace the authorization file).

this can be fixed in under a minute from the system recovery

after booting to recovery open disk utility and mount your system drive

once the system drive is mounted close disk utility and open terminal

edit /Volumes/Macintosh\ HD/etc/pam.d/authorization to remove the line