https://docs.daper.io/install-linux/authentication/index.htmlRecent content in Authentication on DocumentationHugo -- gohugo.ioen-ushttps://docs.daper.io/install-linux/authentication/fingerprint/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.daper.io/install-linux/authentication/fingerprint/index.htmlConfigure fingerprint reader Install fprintd. Then add the following to the top of /etc/pam.d/system-auth auth sufficient pam_unix.so try_first_pass likeauth nullok auth sufficient pam_fprintd.so Then issue fprintd-enroll and tap the sensor until the command exits. After enrollment succeeded verify it with fprintd-verify.https://docs.daper.io/install-linux/authentication/yubikey-pam/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.daper.io/install-linux/authentication/yubikey-pam/index.htmlConfigure yubikey for PAM authentication Install pam-u2f. And then create a file on your home folder: mkdir ~/.config/Yubico pamu2fcfg -o pam://$HOSTNAME -i pam://$HOSTNAME > ~/.config/Yubico/u2f_keys Then for sudo, edit /etc/pam.d/sudo. Add there on the top the pam_u2f module. #%PAM-1.0 auth required pam_env.so auth sufficient pam_u2f.so cue auth sufficient pam_fprintd.so auth sufficient pam_unix.so try_first_pass likeauth nullok auth required pam_deny.so ... You might also want to edit the /etc/pam.d/polkit-1 in the same way.https://docs.daper.io/install-linux/authentication/yubikey-firefox/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.daper.io/install-linux/authentication/yubikey-firefox/index.htmlConfigure yubikey for Firefox PKCS11 Follow the instructions on https://wiki.archlinux.org/title/Common_Access_Card Install ccid and opensc. Execute systemctl enable --now pcscd.socket Navigate to Edit > Preference > Advanced > Certificates > Security Devices and click Load to load a module using /usr/lib/opensc-pkcs11.so or /usr/lib/pkcs11/opensc-pkcs11.so.https://docs.daper.io/install-linux/authentication/yubikey-gpg/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.daper.io/install-linux/authentication/yubikey-gpg/index.htmlIt integrates seamlessly with the Systemd’s pre-defined units. But you might want to sign your commits automatically with GPG. For that purpose, create a .gitconfig on your home folder as follows. [user] name = David Peralta email = david@daper.email signingkey = <signing-key-id> [pull] rebase = true [gpg] program = gpg2 [commit] gpgsign = true [init] defaultBranch = main [includeIf "gitdir:~/Software/<folder-to-exclude>/"] path = ~/.gitconfig_other [color] ui = auto The includeIf section is to exclude everything under the specified path from signing or to sign it with other key.https://docs.daper.io/install-linux/authentication/yubikey-ssh/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://docs.daper.io/install-linux/authentication/yubikey-ssh/index.htmlUse Yubikey’s GnuPG to connect to SSH Add the following to .bashrc export GPG_TTY="$(tty)" echo "UPDATESTARTUPTTY" | gpg-connect-agent > /dev/null 2>&1 export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-socket)