pam_usb 0.4.1

pam_usb is a PAM modules that enables either two-factor or password-less authentication using an USB storage device (such as an USB Flash Memory Token).
It can work with any PAM enabled program, such as login, su, gdm/kdm/xdm, xlock...
This is done with a pair of DSA keys, the private one is stored on the device and the public one on the computer.
Whenever a user tries to authenticate, pam_usb will try to find the usb device and will load the private key.
Then it will compute a private/public key signing challenge using the public key contained in the users home directory.
Then, if configured in two-factor mode (additional mode, in the documentation), a password is asked to the user in order to finish the authentication. Otherwise, if configured in password-less mode (alternative / unique in the documentation) it will log in the user without asking any password.
It can also work using any kind of mountable devices such as floppy disks or cd-roms. To improve security, it supports private key encryption and serial number access list.
Sorry for the poor informations provided here but the website is being redesigned.
Enhancements:
- A security issue related to OpenSSH authentication has been fixed.
- The quiet option has been fixed (now it is really quiet).
- Support has been added for devices without vendor/model information.