pam_usb/doc/pam_usb.conf

<?xml version="1.0" ?><!--
pamusb.conf: Configuration file for pam_usb.

See http://www.pamusb.org/doc/configuring
--><configuration>
		<!-- Default options -->
		<defaults>
				<!-- Example:
						<option name="debug">true</option>
				-->
		</defaults>

		<!-- Device settings -->
		<devices>
				<!-- Example:
				Note: You should use pamusb-conf to add devices automatically.
				<device id="MyDevice">
						<vendor>SanDisk Corp.</vendor>
						<model>Cruzer Titanium</model>
						<serial>SNDKXXXXXXXXXXXXXXXX</serial>
						<volume_uuid>6F6B-42FC</volume_uuid>
						<option name="probe_timeout">10</option>
				</device>
				-->
		</devices>


		<!-- User settings -->
		<users>
				<!-- Note: Use pamusb-conf to add a user, then you can tweak
						manually the configuration here if needed.
				-->

				<!-- Example:
						Authenticate user scox using "MyDevice", and configure pamusb-agent
						to automatically start/stop gnome-screensaver on key insertion and
						removal:
						<user id="scox">
								<device>MyDevice</device>
								<option name="quiet">true</option>
								<agent event="lock">gnome-screensaver-command -\-lock</agent>
								<agent event="unlock">gnome-screensaver-command -\-deactivate</agent>
						</user>

						Configure user root to authenticate using MyDevice, but update one
						time pads at every login (default is 1 hour):
						<user id="root">
								<device>MyDevice</device>
								<option name="pad_expiration">0</option>
						</user>
				-->
	</users>

		<!-- Services settings (e.g. gdm, su, sudo...) -->
		<services>
				<!-- Example: Speed up hotplugging by disabling one time pads -->
				<!--
				<service id="pamusb-agent">
						<option name="one_time_pad">false</option>
				</service>
				-->

				<!-- Disable output for 'su' (needed for gksu) -->
				<!--
				<service id="su">
						<option name="quiet">true</option>
				</service>
				-->
		</services>
</configuration>