Yubico Forum

I might be misunderstanding how this is supposed to work...

I'm running OSX 10.10.5 and use a set of yubikeys in CHAP mode for user login and for the screensaver.

I tried to log in to my machine today with the wrong password. When I touched my yubikey to send the challenge it let me log in, however I couldn't do much since that password wouldn't unlock my keychain.

I tried logging in again to make sure I wasn't mistaken (just typing a random string of characters) and it permitted me to log in again.

Is this how it's supposed to work when you change the relevant files in the /etc/pam.d directory? I was expecting it to verify my password and the challenge from my Yubikey to allow me to log in. It does not seem like this is happening.

Am I missing something?

I am afraid your PAM module is not probably configured.

The Yubikey in Challenge Response mode should work without touch. It would be quite tricky to trigger the CR at will by pressing at the right time.

did you followed this:
https://developers.yubico.com/yubico-pa ... ponse.html

?

You're right. I had rebuilt my mac and put the auth line in there, but had it set to instead of

Thanks for your help.