pam_usb is a PAM module that allows users to use an USB storage device for password-less or two-factor authentication.
This module operates through a pair of DSA keys, where the private key is stored on the device, and the public one on the computer. When a user performs authentication, pam_usb searches for the USB device and loads the private key.
The module then calculates a private/public key signing challenge using the user's public key stored in the home directory. Additionally, users can configure it in two-factor mode, and then a password is requested to complete the authentication. Alternatively, they can set it up in password-less mode, where it logs in the user without a password.
Moreover, this PAM module can also work with other mountable devices such as CD-ROMs or floppy disks. Keeping data security in mind, it offers private key encryption and a serial number access list to enhance protection. Although the website is currently being redesigned, the software is quick and easy to use.
The new version comes with some improved hardware support, making it even more user-friendly. Now, authentication can be performed even with devices that lack vendor and model information. Also, non-USB devices such as SD or MMC cards are supported. Other features such as DBUS workaround and support for Python 2.5 have also been introduced.
To conclude, pam_usb is an excellent PAM module that provides a robust and secure authentication solution. Its flexibility to work with multiple devices and availability to configure according to user authentication needs make it stand out from similar software available.
Version 0.4.2: N/A