Using yubikey for sudo

Question

Is anyone successfully using Yubikey for sudo? It seems promising, but there appears to be a weird bug which makes the setup kind or brittle. The workaround of using nscd for dns caching isn't confidence inspiring.

Answer 1

I am. It works just fine on LinuxMint, following the challenge-response guide from their website. I did run into an issue with the lockscreen on mate because my home directory is encrypted and so my challenge file is stored in /var/yubico but was able to fix it by giving read rights to the mate-screensaver-dialog action using. setcap cap_dac_read_search+eq