hamzasood / pam_touchid Goto Github PK

It would be nice if we could install this with Homebrew (brew.sh).

I want to use my fingerprint to use sudo on my VPS through ssh. Is this possible?

It would be nice to just prompt for password if MBP lid is closed (clamshell mode).

This works great if I keep “Unlocking your Mac” checked in the Touch ID system preferences. However, it fails if I uncheck that box (and leave the other boxes checked).

pam_tid.so behaves essentially the same way, so this may not be fixable.

(Also, any idea where the 0x3f0 value is documented? I'd like to read up.)

OS: macOS 10.14.2 (18C54)

How do I build the project?
Whats the command?
I do not see pam_touchid.so.2 file in any folder.
Please let me know, I would like to try this.
Thanks in advance.

When using this within tmux, the popup doesn't appear, but instead after ~5 seconds it falls back to password authentication:

mbp:~ user$ sudo -l
UI activation timed out.
Password:

Installing tmux-pasteboard and using this in conjunction with the reattach-to-user-namespace command appears to work. For example, by setting up the following alias:

alias sudo='reattach-to-user-namespace sudo'

Do you know if there is a way to fix this properly without such a workaround?

I haven't fully tested this scenario, but at first pass, it seems like pam_touchid prevents a remote SSH user from using sudo on a Mac with pam_touchid installed. The GUI prompt appears and never gives up without GUI user input.

Are there some possible mitigations here?

• Checking the tty being used (does PAM expose this?) and immediately falling back to password authentication if the user is coming from a remote terminal
• or: Adding a timeout so that the Touch ID prompt automatically aborts after 5 seconds, causing a fallback to password authentication.