Yubico Forum

Hello,

I want to configure our Linux systems so, that if a root access established (ssh, su, console) challenge-response is used.
If any other user want to access the system by anyway, only password is required.
My idea is to use a script instead of "/bin/bash" entry in "/etc/passwd".


I found https://github.com/ThomasHabets/ychares which gives me the the same response(with a little change in source) as yubikey-personalization-gui. But how can I handle this response with login/PAM?
Or is there a other solution to do this?

Thanks

Frank