Hi,

When authentication via yubikey is triggered, the module prompts:

  YubiKey for `username':

However, there's no visual feedback that characters are being input when
you press the button on the yubikey, so as a user you're unsure if anything
is happening (and this may take half a second or more). Especailly with
the Nano which has no physical feedback when touching it.

It would be nice if the prompt would change when the first character of
input was received.

Thanks,
Thijs

Thijs Kinkhorst <thijs@debian.org> writes:

Hi.  Is this even possible to achieve from libpam-yubico?  The module
doesn't know that it is used with a terminal, it might be called from a
GNOME Screensaver, non-interactive SSH server, or whatever.  The
application is responsible for these user interaction settings.

Have you seen any other PAM module behave in a way that we could mimic?
Then we can look at the code of that and see if that is applicable to
our module.

Thanks,
/Simon

I'm not very much into PAM internals so it didn't occur to me that this
may be problematic. I decuded from the "Yubikey for" text that the module
had influence over the prompt. If this is not feasible then please close
this request.


Cheers,
Thijs

"Thijs Kinkhorst" <thijs@debian.org> writes:

We control the text, but not the particular prompting (that's done by
the application that is using the PAM framework, which can be GUI or
text or a network server etc) -- however it may be possible to do
something better here, I don't know.  I see no problem keeping this open
until someone has time to dig into the details and tell us something
conclusive.

/Simon