Desktop/sudo on Ubuntu 24.04

Nitrokeys
1

Hi all

I really don’t get this to work.
I want to use my Mini-NK3 to login (console and lightdm) and for sudo.

I included “auth sufficient pam_u2f.so authfile=/etc/Nitrokey/u2f_keys cue [cue_prompt=Please touch the device.] prompt nouserok userpresence=1” to /etc/pam.d/common-auth

(following Desktop Login And Linux User Authentication - Nitrokey Documentation)

But I never geht ask for touching the NC nor can I gain access (Password still works).
I cannot see any errors in the logfile, actualy there is no logentry saying that u2f.so actually did something.

“nitropy nk3 test” seems to work.
"Firmware version: v1.8.1
Init status: ok
Free blocks (int): 219
Free blocks (ext): 459
Variant: NRF52
"
nitroapp2 works
keepassxc works (with touch)

If I misconfigure /etc/pam.d/common-auth on purppose I get erros.
So the line there is read/used, but to no effect…

The docu says the the Requirements are “* Ubuntu 20.04 with Gnome Display Manager.”
Maybe NK3 don’t work with Ubuntu 24.xx?

Any hint would be very much appreciated

2

Seems related/the same as Nitrokey HSM 2 no longer detected - #3 by daubsi?

3

(post deleted by author)

4

Thanks for the reply.
It was my mistake. I did some changes to other pam-files apart from common-auth and forgot about it… sorry for the trouble. So I can confirm it works for ubuntu 24.xx fine.
I still have to figure out, if it is possible to include several “keys” in /etc/Nitrokey/u2f_keys…
It seems only one key works, which is unfortunate… but not a show stopper.

5

If you strictly followed the doc guide, it has an error regarding multiple keys. The command $ pamu2fcfg > ~/.config/Nitrokey/u2f_keys does not “…append its output the u2f_keys” as written.
To add a second key, use $ pamu2fcfg >> ~/.config/Nitrokey/u2f_keys and make sure not to add line breaks manually (it will lead to only the first key being recognised).