Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in or
create an account, your edits will be attributed to your username, along with other benefits.
The edit can be undone.
Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision |
Your text |
Line 407: |
Line 407: |
|
| |
|
| Log files are availabe at <code>/var/log/sssd</code>. | | Log files are availabe at <code>/var/log/sssd</code>. |
|
| |
| === HW enablement ===
| |
| Most of the FIDO2 keys are supported in Fedora out of the box, but some aren’t. The reason is that, by default and for security reasons, USB dongles can't be accessed by users.
| |
|
| |
| In order to enable the key in your system run <code>lsusb</code> and identify your device. Then, create a file in <code>/etc/udev/rules.d</code> with the following content:
| |
|
| |
| <code>
| |
| ACTION!="add|change", GOTO="fido2_end"
| |
|
| |
| KERNEL=="hidraw*", SUBSYSTEM=="hidraw", ATTRS{idVendor}=="XXXX", ATTRS{idProduct}=="XXXX", TAG+="uaccess", GROUP="plugdev", MODE="0660"
| |
|
| |
| LABEL="fido2_end"
| |
| </code>
| |
|
| |
| Replace the XXXX with the information provided by <code>lsusb</code>.
| |
|
| |
| Reload udev rules:
| |
|
| |
| <code># udevadm control --reload-rules</code>
| |
|
| |
| <code># udevadm trigger</code>
| |
|
| |
|
|
| |
|