pam_wtid
pam-watchid
| pam_wtid | pam-watchid | |
|---|---|---|
| 2 | 3 | |
| 57 | 72 | |
| - | - | |
| 0.0 | 0.0 | |
| almost 2 years ago | over 4 years ago | |
| Python | ||
| - | The Unlicense |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pam_wtid
-
Use TouchID to Authenticate Sudo on macOS
Does watch unlock now work natively with pam_tid? I know as of at least a few months ago it would only work if you could use touch ID, i.e. when the laptop was open. If it was docked, it would fall back to password auth.
I wrote a patcher that changed this behavior, it patched pam_tid directly on your system and just updates the API Apple calls to allow unlocking with watch-only when touch ID is unavailable:
https://github.com/inickt/pam_wtid
Was a fun reverse engineering experience and wrote up some more info in the README.
- Show HN: Patching Apple's Touch ID PAM module to add sudo watch authentication
pam-watchid
-
Use TouchID to Authenticate Sudo on macOS
I'm using this to authorize sudo (and other things) with Apple Watch:
https://github.com/insidegui/pam-watchid
... and my /etc/pam.d/sudo needs to be changed like this:
# sudo: auth account password session -
Is there an app that can take a photo when there is an invalid login attempt?
Here's a swift PAM module for watch auth, for example https://github.com/insidegui/pam-watchid
-
Use Touch ID for Sudo on Mac
Very handy. But you can use your Apple Watch for sudo which is even better: [0]
[0] https://github.com/insidegui/pam-watchid
What are some alternatives?
Qubes-scripts - Scripts that help with administration and usage of Qubes OS
WSL-Hello-sudo - Let's sudo by face recognition of Windows Hello on Windows Subsystem for Linux (WSL). It runs on both WSL 1 and WSL 2. This is a PAM module for Linux on WSL.
dotfiles.nix - My dotfiles in NIX
sekey - Use Touch ID / Secure Enclave for SSH Authentication!
howdy - 🛡️ Windows Hello™ style facial authentication for Linux
sudo-touchid - A fork of `sudo` with Touch ID support.
pam_reattach - Reattach to the user's GUI session on macOS during authentication (for Touch ID support in tmux)
toucli - Use TouchID and the Secure Enclave to encrypt data from the commandline.
Fedora-KDE-Yubikey-U2F-2FA-Logins-Guide - Guide to setup a Yubikey for Fedora KDE as 2FA using U2F for the SDDM login screen, lock screen, sudo and su.