Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #205551

Re: Yubikey and LUKS on testing (Buster)

From Georgios Pediaditis <gped@mailbox.org>
Newsgroups linux.debian.user
Subject Re: Yubikey and LUKS on testing (Buster)
Date 2019-02-20 14:50 +0100
Message-ID <xtAq5-1U8-3@gated-at.bofh.it> (permalink)
References <xtx8R-5E-3@gated-at.bofh.it> <xtyRk-17U-23@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


> As far as it accepting the non-yubikey password, remember that a LUKS
> container has multiple key slots (8 or 24, I do not recall precisely at
> the moment).  Accessing a LUKS container only requires that a single key
> be unlocked, so any available password is sufficient to gain access.
> Once you have the yubikey-based password working, you will need to
> remove the other key slot if you no longer want that password to unlock
> the container.

Thanks for your reply.

I know that it has multiple slots. For the time being that's the only reason i can open my laptop :-p

It must be challenge response and not static password since i already use the yubikey slot 1 and i need to use yubikey slot 2 with challenge response on other services.

Thanks again for your help

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Yubikey and LUKS on testing (Buster) gpdsbe@mailbox.org - 2019-02-20 11:20 +0100
  Re: Yubikey and LUKS on testing (Buster) Roberto C. Sánchez <roberto@debian.org> - 2019-02-20 13:10 +0100
    Re: Yubikey and LUKS on testing (Buster) Georgios Pediaditis <gped@mailbox.org> - 2019-02-20 14:50 +0100
      Re: Yubikey and LUKS on testing (Buster) Curt <curty@free.fr> - 2019-02-20 15:20 +0100
        Re: Yubikey and LUKS on testing (Buster) gpdsbe@mailbox.org - 2019-02-20 18:50 +0100

csiph-web