util.c : Add option to silently failover to another auth method about pam-u2f

[a-dma]

Hi,
I'm glad that you find this project useful.

So, is it just a matter of not printing the message or are you having troubles with PAM not using the following module?

If it's the latter try something like this

auth   [success=1 default=ignore]  pam_u2f.so
auth   requisite                   pam_unix.so
auth   required                    pam_permit.so

If instead it's just the print bothering you I can push something tomorrow to fix that. I'm still trying to decide whether or not is bad not to give the user any message at all if debug is turned off.

[tomswartz07]

Hi @a-dma:

The module itself works correctly. I'm just seeing (what I would consider) debug text when the key is not plugged in and it attempts to auth.

I've tried with the [success=1 default=ignore] edits, as you've suggested and it still outputs the text I highlight in my original post.

I think that the text that's output would be most helpful in 'debug mode', but not during normal operation.

If one plans to use the U2F device, you'll either have it plugged in before auth'ing, or use the 'interactive' mode to prompt you to plug and touch the device.

[a-dma]

I pushed a new version, let me know if that works for you.

[Manouchehri]

I can confirm that b5729e8 fixes it. Thanks @a-dma!

Before:

~ > sudo whoami
[util.c:do_authentication(236)] Unable to discover device(s), cannot find U2F device
YubiKey for `david': 
root

After:

~ > sudo whoami
YubiKey for `david': 
root

[tomswartz07]

@a-dma Sorry for the delay. Yes, I can also confirm that the updated version works as well!

Thanks!

[a-dma]

No worries. Closing.