A simpler method for using Touch ID with sudo

[raylas]

On Touch ID enabled MacBook Pros add the following line to the top of /etc/pam.d/sudo:

auth sufficient pam_tid.so

Not sure how new/recent this is capability is, but I thought it might be of interest to this repo.

[serverwentdown]

wow gonna switch to this tonight.

[serverwentdown]

wow yes it does the trick! amazing.

[tomlobato]

amazing!

the next level is to have remote ssh touch id support :)
ssh me@mysrv
me@mysrv $ sudo su <-- touch
root@mysrv #

[noomorph]

It is a clear winner method. Kudos to @raylas !

[raylas]

Glad to shed some light on it. I've used sudo-touchid for a while now and I'm still thankful for the work this repo has done!

Now to tackle Touch ID for ssh private key auth like @tomlobato mentioned...

[raylas]

@tomlobato found this repo/agent that allows you to use Touch ID and a key stored in the secure enclave to authenticate to SSH servers:

https://github.com/ntrippar/sekey

[tomlobato]

Awesome. Tks @raylas!

[hu13]

is there a way to make it work for su?

auth sufficient pam_tid.so doesn't.