Score:0

Passwordless Login to Ubunto 20.04 with FIDO2

us flag

So i've setup passwordless thru FIDO2 by adding

auth sufficient pam_u2f.so authfile=/home/me/.config/FIDO2/u2f_keys

having followed the instructions on the yubico page to generate the u2f_keys code

It's working great as an additional factor of authentication but I'd like it to be the only one (ie, we are going passwordless) or at least the primary form of authentication. Right now logging in and sudo'ing results in it asking for a password and then asking to tap the key.

Tomas Zellerin avatar
yt flag
A year late, I know, but where did you put that auth line? At the beginning or at the end? Similar worked for me when it was before the ones that checked password.
vanadium avatar
cn flag
See here to disable the sudo password: https://askubuntu.com/questions/147241/execute-sudo-without-password Then set the keyring password blank, and enable autologin.
Dan D avatar
us flag
Enabling auto login would bypass FIDO2 I'm pretty sure..
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.