- The first step is to open
/etc/pam.d/sudowithsudoprivileges.
sudo nano /etc/pam.d/sudo- The next step is to add the following line to the top of the previous file.
auth sufficient pam_tid.so
- Now the file should look like this:
# sudo: auth account password session
auth sufficient pam_tid.so
auth sufficient pam_smartcard.so
auth required pam_opendirectory.so
account required pam_permit.so
password required pam_deny.so
session required pam_permit.so
-
Save the file.
-
Test the configuration by executing
sudo ls. A Touch ID dialog should appear. If the dialog is cancelled the password will be prompted in the usual way.