Security/PamUsb/GettingStarted - Historique des versions

Didier : /* Agent */

2014-09-03T09:51:50Z

Agent

← Version précédente		Version du 3 septembre 2014 à 09:51
Ligne 169 :		Ligne 169 :
	pamusb-agent[6674]: Unlocked.		pamusb-agent[6674]: Unlocked.
	</pre>		</pre>

			== F.A.Q. ==

			{{Admon/faq\|Sometimes pamusb stopped authenticating with the message "Pad checking failed".\|In this case, issuing the following command helped me:
			<pre>
			rm ~/.pamusb/*
			</pre>}}

	= Fine Tuning =		= Fine Tuning =

Didier : /* Usefull scripts */

2013-01-02T10:44:08Z

Usefull scripts

← Version précédente		Version du 2 janvier 2013 à 10:44
Ligne 223 :		Ligne 223 :
	'''KDE Autostart script'''		'''KDE Autostart script'''

	We use <app>ksshaskpass</app> to make password less ~~application~~.		We use <app>ksshaskpass</app> to make application password-less.

	To use this script, you must create <path>/var/log/didier</path> directory, and change its owner and group before use. In that case :		To use this script, you must create <path>/var/log/didier</path> directory, and change its owner and group before use. In that case :
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">

Didier : /* Usefull scripts */

2013-01-02T10:42:49Z

Usefull scripts

← Version précédente		Version du 2 janvier 2013 à 10:42
Ligne 222 :		Ligne 222 :

	'''KDE Autostart script'''		'''KDE Autostart script'''

			We use <app>ksshaskpass</app> to make password less application.
	To use this script, you must create <path>/var/log/didier</path> directory, and change its owner and group before use. In that case :		To use this script, you must create <path>/var/log/didier</path> directory, and change its owner and group before use. In that case :
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">

Didier : /* Agent */

2013-01-02T10:40:07Z

Agent

← Version précédente		Version du 2 janvier 2013 à 10:40
Ligne 159 :		Ligne 159 :
	All identities removed.		All identities removed.
	pamusb-agent[6674]: Running "fusermount -u /home/didier/unsafe"		pamusb-agent[6674]: Running "fusermount -u /home/didier/unsafe"
	~~fusermount: entry for /home/didier/unsafe not found in /etc/mtab~~
	pamusb-agent[6674]: Locked.		pamusb-agent[6674]: Locked.
	pamusb-agent[6674]: Device "masterkey" has been inserted. Performing verification...		pamusb-agent[6674]: Device "masterkey" has been inserted. Performing verification...

Didier : /* Agent */

2013-01-02T10:39:06Z

Agent

← Version précédente		Version du 2 janvier 2013 à 10:39
Ligne 151 :		Ligne 151 :
	<pre>		<pre>
	$ ./pamusb-agent		$ ./pamusb-agent
	pamusb-agent[~~31472~~]: pamusb-agent up and running.		pamusb-agent[6674]: pamusb-agent up and running.
	pamusb-agent[~~31472~~]: Watching device "masterkey" for user "didier"		pamusb-agent[6674]: Watching device "masterkey" for user "didier"
			pamusb-agent[6674]: Device "masterkey" has been removed, locking down user "didier"...
			pamusb-agent[6674]: Running "qdbus org.freedesktop.ScreenSaver /ScreenSaver Lock"

	pamusb-agent[~~31472]: Device "masterkey" has been removed, locking down user "didier"...~~		pamusb-agent[6674]: Running "ssh-add -D"
	~~pamusb-agent[31472]: Running "qdbus org.freedesktop.ScreenSaver /ScreenSaver Lock"~~

	~~pamusb-agent[31472~~]: Running "ssh-add -D"
	All identities removed.		All identities removed.
	pamusb-agent[~~31472~~]: Locked.		pamusb-agent[6674]: Running "fusermount -u /home/didier/unsafe"
	pamusb-agent[~~31472~~]: Device "masterkey" has been inserted. Performing verification...		fusermount: entry for /home/didier/unsafe not found in /etc/mtab
	pamusb-agent[~~31472~~]: Executing "/usr/bin/pamusb-check --quiet --config=/etc/pamusb.conf --service=pamusb-agent didier"		pamusb-agent[6674]: Locked.
	pamusb-agent[~~31472~~]: Authentication succeeded. Unlocking user "didier"...		pamusb-agent[6674]: Device "masterkey" has been inserted. Performing verification...
	pamusb-agent[~~31472~~]: Running "qdbus org.kde.screenlocker /MainApplication quit"		pamusb-agent[6674]: Executing "/usr/bin/pamusb-check --quiet --config=/etc/pamusb.conf --service=pamusb-agent didier"
			pamusb-agent[6674]: Authentication succeeded. Unlocking user "didier"...
			pamusb-agent[6674]: Running "qdbus org.kde.screenlocker /MainApplication quit"

	pamusb-agent[~~31472~~]: Running "/home/didier/.kde/Autostart/ssh-add.sh"		pamusb-agent[6674]: Running "/home/didier/.kde/Autostart/ssh-add.sh"
	pamusb-agent[~~31472~~]: Unlocked.		pamusb-agent[6674]: Running "encfs /home/didier/.safe/ /home/didier/unsafe --extpass=ksshaskpass"
			pamusb-agent[6674]: Unlocked.
	</pre>		</pre>

Didier : /* Fine Tuning */

2013-01-02T10:29:47Z

Fine Tuning

← Version précédente		Version du 2 janvier 2013 à 10:29
Ligne 205 :		Ligne 205 :
	<agent event="unlock">qdbus org.kde.screenlocker /MainApplication quit</agent>		<agent event="unlock">qdbus org.kde.screenlocker /MainApplication quit</agent>
	<agent event="unlock">/home/didier/.kde/Autostart/ssh-add.sh</agent>		<agent event="unlock">/home/didier/.kde/Autostart/ssh-add.sh</agent>
	<agent event="unlock">encfs /home/didier/.safe/ /home/didier/unsafe</agent>		<agent event="unlock">encfs /home/didier/.safe/ /home/didier/unsafe --extpass=ksshaskpass</agent>

	</user>		</user>

Didier : /* Usefull scripts */

2013-01-02T10:25:25Z

Usefull scripts

← Version précédente		Version du 2 janvier 2013 à 10:25
Ligne 217 :		Ligne 217 :

	== Usefull scripts ==		== Usefull scripts ==
			Depending on your desktop environment, you have to add pamusb-agent to the list
			of autostarted applications so it will be started automatically.

	'''KDE Autostart script'''		'''KDE Autostart script'''
Ligne 241 :		Ligne 243 :
	}		}
	</syntaxhighlight>		</syntaxhighlight>


			'''GNOME''':
			# Open System -> Preferences -> Sessions
			# Select Startup Programs and press Add
			# Enter pamusb-agent and press OK
			# Press Close


	There are many options available to fine configure pam_usb.		There are many options available to fine configure pam_usb.

	Check out the [[Security/PamUsb/ConfigurationFile\| Configuration File]].		Check out the [[Security/PamUsb/ConfigurationFile\| Configuration File]].

Didier : /* Agent */

2013-01-02T10:23:59Z

Agent

@@ Ligne 151 : / Ligne 151 : @@
 <pre>
 $ ./pamusb-agent
-pamusb-agent[31915]: pamusb-agent up and running.
+pamusb-agent[31472]: pamusb-agent up and running.
-pamusb-agent[31915]: Watching device "didier-key" for user "didier"
+pamusb-agent[31472]: Watching device "masterkey" for user "didier"
-pamusb-agent[31915]: Locked.
+pamusb-agent[31472]: Device "masterkey" has been removed, locking down user "didier"...
-pamusb-agent[31915]: Device "didier-key" has been inserted. Performing verification...
+pamusb-agent[31472]: Running "qdbus org.freedesktop.ScreenSaver /ScreenSaver Lock"
-pamusb-agent[31915]: Unlocked.
+pamusb-agent[31472]: Running "ssh-add -D"
 </pre>
 = Fine Tuning =

Didier : /* Fine Tuning */

2013-01-02T10:19:41Z

Fine Tuning

← Version précédente		Version du 2 janvier 2013 à 10:19
Ligne 178 :		Ligne 178 :

	= Fine Tuning =		= Fine Tuning =
	~~Lock/Unlock process do~~		Agent must
	* Lock/Unlock screen		* Lock/Unlock screen
	* [[Security/KDE/SSH/LoadKey\| ssh-agent to load/unload private key without password]]		* call [[Security/KDE/SSH/LoadKey\| ssh-agent to load/unload private key without password]]
	* [[Security/Crypt/Directory\| encrypt/decrypt ~~directory~~]] automatically.		* [[Security/Crypt/Directory\| encrypt/decrypt safe directories]] automatically.

	Fichier <path>/etc/pamusb.conf</path>		Fichier <path>/etc/pamusb.conf</path>

Didier : /* Fine Tuning */

2013-01-02T10:17:32Z

Fine Tuning

← Version précédente		Version du 2 janvier 2013 à 10:17
Ligne 178 :		Ligne 178 :

	= Fine Tuning =		= Fine Tuning =
	Lock/Unlock process ~~use~~ [[Security/KDE/SSH/LoadKey\| ssh-agent to load/unload private key without password]] ~~and~~ [[Security/Crypt/Directory\| encrypt/decrypt directory]] automatically.		Lock/Unlock process do
			* Lock/Unlock screen
			* [[Security/KDE/SSH/LoadKey\| ssh-agent to load/unload private key without password]]
			* [[Security/Crypt/Directory\| encrypt/decrypt directory]] automatically.

	Fichier <path>/etc/pamusb.conf</path>		Fichier <path>/etc/pamusb.conf</path>

Security/PamUsb/GettingStarted - Historique des versions

Didier : /* Agent */

Didier : /* Usefull scripts */

Didier : /* Usefull scripts */

Didier : /* Agent */

Didier : /* Agent */

Didier : /* Fine Tuning */

Didier : /* Usefull scripts */

Didier : /* Agent */

Didier : /* Fine Tuning */

Didier : /* Fine Tuning */

Didier : /* Agent */

Didier : /* Usefull scripts */

Didier : /* Usefull scripts */

Didier : /* Agent */

Didier : /* Agent */

Didier : /* Fine Tuning */

Didier : /* Usefull scripts */

Didier : /* Agent */

Didier : /* Fine Tuning */

Didier : /* Fine Tuning */