Description
Adds YubiKey authentication support to PAM-based login flows. Administrators can use it to require or combine hardware-token checks for system login, sudo, screen unlock, or other PAM-controlled services.
PAM mistakes can lock users out of the system. Configure recovery accounts, test in a separate session, and document fallback access before enforcing hardware-key authentication.