Yubico Forum
https://forum.yubico.com/

Yubikey + PAM for xscreensaver in non-GNOME Ubuntu 12.10
https://forum.yubico.com/viewtopic.php?f=12&t=902		 Page 1 of 1
Author:  frew [ Fri Jan 04, 2013 3:30 am ]
Post subject:  Yubikey + PAM for xscreensaver in non-GNOME Ubuntu 12.10
I'm setting up my yubikey for two factor auth in my machines. This is what I added to /etc/pam.d/{login,sudo} and it works perfectly:

Code:
auth required pam_yubico.so id=XXXX authfile=/etc/yubikey_mappings


Now it get's more complicated. I added the above to my xscreensaver pam.d config and I can't seem to get it to authorize! I have a theory that the problem is related to gnome-keyring, but I don't know that for sure. This is my .xinitrc:

Code:
nm-applet &
xcompmgr -cF &
eval `gnome-keyring-daemon`

exec awesome


I get the following error:

Code:
warning: gnome_keyring:: C_Initialize called twice from same process


and the yubikey part never authenticates. Can anyone help me fix this problem? I can turn on some kind of debugging but I'm not totally sure how
Author:  Tom [ Fri Jan 04, 2013 1:50 pm ]
Post subject:  Re: Yubikey + PAM for xscreensaver in non-GNOME Ubuntu 12.10
Hello,

please try this

user@host$ sudo pam-auth-update
Author:  frew [ Fri Jan 04, 2013 2:52 pm ]
Post subject:  Re: Yubikey + PAM for xscreensaver in non-GNOME Ubuntu 12.10
Ok, I did that and disabled the gnome-keyring, tried the xscreensaver dance but it still failed auth. Next I tried enabling the Yubico option and removing my custom addtions, same result.
Author:  frew [ Fri Jan 04, 2013 4:09 pm ]
Post subject:  Re: Yubikey + PAM for xscreensaver in non-GNOME Ubuntu 12.10
Ok, this is so bizarre. I got everything to work (after trying what you recommended and actually looking at the files and filling in the required values), gdm included, *except* for xscreensaver
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/