Plug and mount your USB flash disk before calling pamusb-conf
(a hidden folder .pamusb
will be created).
sudo apt-get install libpam-usb pamusb-tools sudo pamusb-conf --add-device dummy name sudo pamusb-conf --add-user login name
Add one line:
# # /etc/pam.d/common-auth - authentication settings common to all services # # This file is included from other service-specific PAM config files, # and should contain a list of the authentication modules that define # the central authentication scheme for use on the system # (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the # traditional Unix authentication mechanisms. # # As of pam 1.0.1-6, this file is managed by pam-auth-update by default. # To take advantage of this, it is recommended that you configure any # local modules either before or after the default block, and use # pam-auth-update to manage selection of other modules. See # pam-auth-update(8) for details. # here are the per-package modules (the "Primary" block) auth sufficient pam_usb.so auth [success=1 default=ignore] pam_unix.so nullok_secure # here's the fallback if no module succeeds auth requisite pam_deny.so # prime the stack with a positive return value if there isn't one already; # this avoids us returning an error just because nothing sets a success code # since the modules above will each just jump around auth required pam_permit.so # and here are more per-package modules (the "Additional" block) # end of pam-auth-update config
Check, if it works with:
pamusb-check <username>
If you never want to have to enter your password, not even after booting, you could either use Gnome's auto-login feature, or mount the SSD drive via fstab.
Sometimes pamusb stopped authenticating with the message "Pad checking failed". In this case, issuing the following command helped me:
rm ~/.pamusb/*