I discovered pamusb a few days ago (actually, I had already heard about it, but never puzzled to try it), and WOW it’s great! In case you wouldn’t have guessed it yet, it lets you use an USB drive or a removable media (SD cars or so), as a mean of authentication for any pam-based application (su/sudo, keyrings, screensaver…). The setup is damn easy (it’s all about adding one line to a file in /etc/pam.d, typing two commands and adding an agent run on every session), and the whole thing works damn well.
It’s just really cool to just have to unplug an usb key to lock my laptop and replug it to unlock it, or to insert it upon login or… It’s just greatly useful. I’m still a bit reluctant to make it “required” and not just “sufficient”. It’d just be awful to be unable to login because I lose it or so…
Oh, just a little tip, to avoid “Unsafe disk removal”, just add the drive to /etc/fstab (you can reference it by label) and make it readonly and mountable by user.
LABEL=MY-KEY /media/auth vfat ro,defaults,user,noauto 0 0If you want to rename *your key, just head to the RenameUSBDrive article in Ubuntu Documentation
Here are 0.4.2 debs for hardy (which currently only has 0.4.0):
And a few handy links: