Skip to content

Commit 0adeda2

Browse files
committed
man: update with info about conf file
1 parent 023bfcd commit 0adeda2

File tree

1 file changed

+27
-0
lines changed

1 file changed

+27
-0
lines changed

man/pam_u2f.8.txt

+27
Original file line numberDiff line numberDiff line change
@@ -134,6 +134,12 @@ FIDO devices. It is not possible to mix native credentials and SSH
134134
credentials. Once this option is enabled all credentials will be parsed
135135
as SSH.
136136

137+
*conf*=_path/to/pam_u2f.conf_::
138+
Set an alternative location for the configuration file.
139+
The supplied path must be absolute and must correspond to an existing
140+
regular file.
141+
See *CONFIGURATION FILE*.
142+
137143
== EXAMPLES
138144

139145
Second factor authentication deferring user verification configuration to the
@@ -162,6 +168,27 @@ mapping file in an encrypted home directory, will result in the
162168
impossibility of logging into the system. The partition is decrypted
163169
after login and the mapping file can not be accessed.
164170

171+
== CONFIGURATION FILE
172+
173+
A configuration file can be used to set the default module arguments.
174+
175+
The file has a `name = value` format, with comments starting with the `#`
176+
character.
177+
White spaces at the beginning of line, end of line, and around
178+
the `=` sign are ignored.
179+
180+
Any `conf` argument in the configuration file is ignored.
181+
182+
The maximum size for the configuration file is 4 KiB.
183+
184+
The default path for the configuration file is
185+
`/etc/security/pam_u2f.conf`. Note that it may have been set to another
186+
value by the distribution. The default file is allowed to not exist. An
187+
alternative path may be set in the module command line options.
188+
189+
The options specified on the module command line override the values
190+
from the configuration file.
191+
165192
== NOTES
166193

167194
*Nodetect*

0 commit comments

Comments
 (0)