MacOS: attempting to login when u2f is required w/o key inserted causes logout about pam-u2f

[a-dma]

Hi,

I would have to assume that this behavior is dictated by how MacOS reacts to specific errors from the module. It would be interesting if you could grab a debug output of the whole process.

[kristovatlas]

Can you recommend a source of debug data?

[a-dma]

You can use the debug flag in the module itself. Keep in mind that this enables debugging to stderr, so using this for something like a login facility might be a bit tricky...

[kristovatlas]

@a-dma My expectation is that the stdout won't be captured in any log files. Any chance you can add an additional option to the module that permits logging to a file rather than to stdout? This seems like it would be generally useful for debugging given that stdout is often not accessible during an authentication process.

[a-dma]

Pushed some code to do that. Hopefully it helps.

[c00kiemon5ter]

I am running Sierra/10.12.6 and it seems to be working fine.