Skip to content

Commit

Permalink
Added how to setup Manjaro 18.x.
Browse files Browse the repository at this point in the history
Added Manjaro setup for passwordless and second factor login to
documentation of applcation ideas. Also did some text formating.
  • Loading branch information
jolo1581 authored and conorpp committed Feb 6, 2020
1 parent 2ca0ced commit 794accf
Showing 1 changed file with 66 additions and 18 deletions.
84 changes: 66 additions & 18 deletions docs/solo/application-ideas.md
Original file line number Diff line number Diff line change
@@ -1,16 +1,23 @@
# Using Solo for passwordless or second factor login on Linux

## Setup on Ubuntu 18.04
## Setup on Ubuntu and Manjaro
Before you can use Solo for passwordless or second factor login in your Linux system you have to install some packages.

This was tested under **Linux Mint 19.2**.
This was tested on **Linux Mint 19.3** and on **Manjaro 18.x**

First you have to install PAM modules for u2f.

**Ubuntu (Linux Mint):**
```
sudo apt install libpam-u2f pamu2fcfg
```

**Manjaro**
```
pacman -Syu pam-u2f
```


## Setting up key
To use Solo as passwordless or second factor login, you have to setup your system with your Solo.
First create a new folder named **Yubico** in your **.config** folder in your **home** directory
Expand All @@ -28,35 +35,57 @@ If you want to register an additional key use this command instead:
pamu2fcfg >> ~/.config/Yubico/u2f_keys
```
Now press the button on your Solo.

<br>
<br>

If you can't generate your key (error message), you may add Yubico Team from PPA and install latest libpam-u2f and pamu2fcfg and try again.
If you can't generate your key on **Ubuntu** (error message), you may add Yubico Team from PPA and install latest libpam-u2f and pamu2fcfg and try again.
```
sudo add-apt-repository ppa:yubico/stable
sudo apt-get update
sudo apt-get upgrade
```

**Manjaro** should work without problems.


## Login into Linux
### Passwordless
To login passwordless into your Linux system, you have to edit the file **lightdm** (or **gdm** or which display manager you prefered).
In case of lightdm:
In case of lightdm and VIM as editor:

```
sudo vim /etc/pam.d/lightdm
sudo vim /etc/pam.d/lightdm
```
Now search following entry:

**On Ubuntu:**<br>
Search following entry:
```
@include common-auth
@include common-auth
```
and add
```
auth sufficient pam_u2f.so
auth sufficient pam_u2f.so
```
**before** *@include common-auth.*
<br>
<br>

**On Manjaro**<br>
Search following enrty
```
auth include system-login
```
**before** @include common-auth.

Save the file and test it.<br>
and add
```
auth sufficient pam_u2f.so
```

** before** *auth include system-login*.
<br>
<br>

Now save the file and test it.<br>
Insert Solo in your USB port and logout.
Now you should be able to login into Linux without password, only with pressing your button on Solo and press enter.

Expand All @@ -65,7 +94,7 @@ Why **sufficient**? The difference between the keyword sufficient and required i

The login mechanism can be also used for additional features like:

: - Login after screen timeout - edit /etc/pam.d/mate-screensaver (or kde-screensaver, ...)
- Login after screen timeout - edit /etc/pam.d/mate-screensaver (or kde-screensaver, ...)
- Passwordless sudo - edit /etc/pam.d/sudo

Check out your folder **/etc/pam.d/** and do some experiments.
Expand All @@ -78,17 +107,36 @@ The login passwordless won't make your system more secure, but maybe more comfor
To use Solo as second factor, for login into your Linux system, is nearly the same.

```
sudo vim /etc/pam.d/lightdm
sudo vim /etc/pam.d/lightdm
```
Now search following entry:

**On Ubuntu**<br>
Search following entry:
```
@include common-auth
@include common-auth
```
and add
```
auth required pam_u2f.so
auth required pam_u2f.so
```
**after** *@include common-auth*.
<br>
<br>

**On Manjaro**<br>
Search following entry:
```
auth include system-login
```

Add following entry
```
auth required pam_u2f.so
```
**after** @include common-auth.

**after** *auth include system-login*.
<br>
<br>

Save the file and test it. <br>
In case your Solo is not present, your password will be incrorrect. If Solo is plugged into your USB port, it will signal pressing the button and you will be able to login into Linux.
Expand Down

0 comments on commit 794accf

Please sign in to comment.