pam_wtid
pamgpgr
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pam_wtid
-
Use TouchID to Authenticate Sudo on macOS
Does watch unlock now work natively with pam_tid? I know as of at least a few months ago it would only work if you could use touch ID, i.e. when the laptop was open. If it was docked, it would fall back to password auth.
I wrote a patcher that changed this behavior, it patched pam_tid directly on your system and just updates the API Apple calls to allow unlocking with watch-only when touch ID is unavailable:
https://github.com/inickt/pam_wtid
Was a fun reverse engineering experience and wrote up some more info in the README.
- Show HN: Patching Apple's Touch ID PAM module to add sudo watch authentication
pamgpgr
-
Use TouchID to Authenticate Sudo on macOS
Self plug, but here's a PAM module I made for using gpg for login: https://gitlab.com/rendaw/pamgpgr . I've been using it for a couple years for sudo I think (yubikey).
The code is fairly small so it can be an example for doing other PAM things too.
What are some alternatives?
pam-watchid - PAM plugin module that allows the Apple Watch to be used for authentication
dotfiles.nix - My dotfiles in NIX
Qubes-scripts - Scripts that help with administration and usage of Qubes OS
toucli - Use TouchID and the Secure Enclave to encrypt data from the commandline.
howdy - 🛡️ Windows Hello™ style facial authentication for Linux
Win32-OpenSSH - Win32 port of OpenSSH
sekey - Use Touch ID / Secure Enclave for SSH Authentication!
WinCryptSSHAgent - Using a Yubikey for SSH Authentication on Windows Seamlessly