pam_usb For Linux

pam_usb is a PAM modules that enables either two-factor or password-less authentication using an USB storage device (such as an USB Flash Memory Token). It can work with any PAM enabled program, such as login, su, gdm/kdm/xdm, xlock...

This is done with a pair of DSA keys, the private one is stored on the device and the public one on the computer.

Whenever a user tries to authenticate, pam_usb will try to find the usb device and will load the private key.

Then it will compute a private/public key signing challenge using the public key contained in the user's home directory.

Then, if configured in two-factor mode (additional mode, in the documentation), a password is asked to the user in order to finish the authentication. Otherwise, if configured in password-less mode (alternative / unique in the documentation) it will log in the user without asking any password.

It can also work using any kind of mountable devices such as floppy disks or cd-roms. To improve security, it supports private key encryption and serial number access list.

Sorry for the poor informations provided here but the website is being redesigned.