Fincer
/
pam_usb
mirror of https://github.com/Fincer/pam_usb
1
0
Fork 0
Code Issues 0 Releases 4 Wiki Activity
Hardware authentication for Linux using ordinary USB Flash Drives.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
278 Commits
1 Branch
501 KiB
 
 
 
 
 
Tree: 666d21ce31
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '666d21ce31'
${ noResults }
 ZIP  TAR.GZ
Pekka Helenius 666d21ce31 Agent: additional checks, more log messages 4 years ago
arch_linux Update Arch Linux PKGBUILD 4 years ago
doc Update docs (agent command section) 4 years ago
src Comment un-used variable tty 4 years ago
tools Agent: additional checks, more log messages 4 years ago
utils Removed deprecated scripts 13 years ago
.gitignore Added .gitignore 13 years ago
COPYING Updated Free Software Foundation address in license notes 8 years ago
ChangeLog Updated ChangeLog 13 years ago
Makefile Update Makefile 8 years ago
README.md README: Fix wiki links 4 years ago

README.md

pam_usb

pam_usb provides hardware authentication for Linux using ordinary USB Flash Drives.

It works with any application supporting PAM, such as su and login managers (GDM, KDM).

Features

  • Password-less authentication. Use your USB stick for authentication, don't type passwords anymore.
  • Device auto probing. You don't need to mount the device, or even to configure the device location (sda1, sdb1, etc). pam_usb.so will automatically locate the device using UDisks and access its data by itself.
  • Two-factor authentication. Achieve greater security by requiring both the USB stick and the password to authenticate the user.
  • Non-intrusive. pam_usb doesn't require any modifications of the USB storage device to work (no additional partitions required).
  • USB Serial number, model and vendor verification.
  • Support for One Time Pads authentication.
  • You can use the same device across multiple machines.
  • Support for all kind of removable devices (SD, MMC, etc).

Tools

  • pamusb-agent: trigger actions (such as locking the screen) upon device authentication and removal.
  • pamusb-conf: configuration helper.
  • pamusb-check: integrate pam_usb's authentication engine within your scripts or applications.

Getting Started