pam_usb is a PAM module that enables either two-factor or password-less authentication using an USB storage device.
Version: 0.4.2pam_usb is a PAM modules that enables either two-factor or password-less authentication using an USB storage device (such as an USB Flash Memory Token).
Operating System: Linux
It can work with any PAM enabled program, such as login, su, gdm/kdm/xdm, xlock...
This is done with a pair of DSA keys, the private one is stored on the device and the public one on the computer.
Whenever a user tries to authenticate, pam_usb will try to find the usb device and will load the private key.
Then it will compute a private/public key signing challenge using the public key contained in the user's home directory.
Then, if configured in two-factor mode (additional mode, in the documentation), a password is asked to the user in order to finish the authentication. Otherwise, if configured in password-less mode (alternative / unique in the documentation) it will log in the user without asking any password.
It can also work using any kind of mountable devices such as floppy disks or cd-roms. To improve security, it supports private key encryption and serial number access list.
Sorry for the poor informations provided here but the website is being redesigned.
What's New in This Release:
Â· Hardware support was improved.
Â· Now devices without vendor and model information can be used for authentication.
Â· Non-USB devices are now supported, so you can now use every kind of removable storage device, such as SD or MMC cards.
Â· Many other smaller bugfixes and features have been included, such as the DBUS workaround and support for Python 2.5.