Yubikey can have different modes of authentication. I remember looking at the work of adubois last year as a possible solution. My Yubikey has a slot used for Challenge/Response, which is MUCH easier to work with when you have multiple systems and devices.
I guess YubicoOTP would require something like a custom PAM module... but with Challenge/Response, my solution was to use the built-in pam_exec.so to run a very short script when authenticating. The only dependency is to install ykpers on sys-usb as it uses ykchalresp. https://gist.github.com/Joeviocoe/929ebde1066a22491bf93ccc9d6c0ba3 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/e5d1abf4-4627-4a09-927c-ec4294cc481d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.