{"action":"closed","issue":{"url":"https://api.github.com/repos/Yubico/yubico-pam/issues/51","labels_url":"https://api.github.com/repos/Yubico/yubico-pam/issues/51/labels{/name}","comments_url":"https://api.github.com/repos/Yubico/yubico-pam/issues/51/comments","events_url":"https://api.github.com/repos/Yubico/yubico-pam/issues/51/events","html_url":"https://github.com/Yubico/yubico-pam/issues/51","id":56584439,"number":51,"title":"OS X 10.10.2 Challange Response kind of working...not","user":{"login":"megatraveler","id":1627289,"avatar_url":"https://avatars.githubusercontent.com/u/1627289?v=3","gravatar_id":"","url":"https://api.github.com/users/megatraveler","html_url":"https://github.com/megatraveler","followers_url":"https://api.github.com/users/megatraveler/followers","following_url":"https://api.github.com/users/megatraveler/following{/other_user}","gists_url":"https://api.github.com/users/megatraveler/gists{/gist_id}","starred_url":"https://api.github.com/users/megatraveler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/megatraveler/subscriptions","organizations_url":"https://api.github.com/users/megatraveler/orgs","repos_url":"https://api.github.com/users/megatraveler/repos","events_url":"https://api.github.com/users/megatraveler/events{/privacy}","received_events_url":"https://api.github.com/users/megatraveler/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-02-04T20:42:45Z","updated_at":"2015-02-16T08:23:46Z","closed_at":"2015-02-16T08:23:46Z","body":"Hi,\r\n\r\nI implemented my new Yubikey into my OS X PAM like described within https://developers.yubico.com/yubico-pam/MacOS_X_Challenge-Response.html\r\n\r\nI entered the\r\n```\r\nauth       sufficient     pam_yubico.so mode=challenge-response debug\r\n```\r\nline into /etc/pam.d/sudo\r\n\r\nThat is what I get as Output when I try to sudo:\r\n```\r\n55-555-1::[20150204-160652]::mT@yg:~\r\n$ sudo -i\r\nPassword:\r\ndebug: pam_yubico.c:764 (parse_cfg): called.\r\ndebug: pam_yubico.c:765 (parse_cfg): flags -2147483648 argc 2\r\ndebug: pam_yubico.c:767 (parse_cfg): argv[0]=mode=challenge-response\r\ndebug: pam_yubico.c:767 (parse_cfg): argv[1]=debug\r\ndebug: pam_yubico.c:768 (parse_cfg): id=-1\r\ndebug: pam_yubico.c:769 (parse_cfg): key=(null)\r\ndebug: pam_yubico.c:770 (parse_cfg): debug=1\r\ndebug: pam_yubico.c:771 (parse_cfg): alwaysok=0\r\ndebug: pam_yubico.c:772 (parse_cfg): verbose_otp=0\r\ndebug: pam_yubico.c:773 (parse_cfg): try_first_pass=0\r\ndebug: pam_yubico.c:774 (parse_cfg): use_first_pass=0\r\ndebug: pam_yubico.c:775 (parse_cfg): authfile=(null)\r\ndebug: pam_yubico.c:776 (parse_cfg): ldapserver=(null)\r\ndebug: pam_yubico.c:777 (parse_cfg): ldap_uri=(null)\r\ndebug: pam_yubico.c:778 (parse_cfg): ldapdn=(null)\r\ndebug: pam_yubico.c:779 (parse_cfg): user_attr=(null)\r\ndebug: pam_yubico.c:780 (parse_cfg): yubi_attr=(null)\r\ndebug: pam_yubico.c:781 (parse_cfg): yubi_attr_prefix=(null)\r\ndebug: pam_yubico.c:782 (parse_cfg): url=(null)\r\ndebug: pam_yubico.c:783 (parse_cfg): urllist=(null)\r\ndebug: pam_yubico.c:784 (parse_cfg): capath=(null)\r\ndebug: pam_yubico.c:785 (parse_cfg): token_id_length=12\r\ndebug: pam_yubico.c:786 (parse_cfg): mode=chresp\r\ndebug: pam_yubico.c:787 (parse_cfg): chalresp_path=(null)\r\ndebug: pam_yubico.c:829 (pam_sm_authenticate): get user returned: mT\r\ndebug: pam_yubico.c:506 (do_challenge_response): Loading challenge from file /Users/mT/.yubico/challenge-3016718\r\ndebug: util.c:270 (load_chalresp_state): Challenge: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX, salt: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX, iterations: 10000, slot: 2\r\ndebug: pam_yubico.c:584 (do_challenge_response): Got the expected response, generating new challenge (63 bytes).\r\ndebug: pam_yubico.c:664 (do_challenge_response): Challenge-response success!\r\n```\r\n\r\nSo, it give me a success at the end, but OS X seems to be really unimpressed by this and still ask me for the password -.-\r\n\r\nWhere do I go wrong? :/ \r\n\r\nI already searched for one week, but of course I do also not want to brick my box, by removing password auth from the /etc/pam.d/sudo\r\n\r\nIt also fails when I try to do the same in the file /etc/pam.d/screensaver :(\r\n\r\nAdvance Thanks"}}