akay

Overview

How to configure FreeBSD and applicable applications to work with Yubikey for authentication. This serves as my work-in-progress documentation of the configuration knobs needed to make this work properly.

FreeBSD ssh with piv smartcard slot on Yubikey (pkcs11 via libykcs11.so)
FreeBSD ssh with fido support on Yubikey
FreeBSD Firefox/Chromium with fido + webauthn support on Yubikey
FreeBSD local console and gdm authentication using pam on Yubikey
FreeBSD official YubiKey tools

Latest Tested FreeBSD versions

FreeBSD 13.2 Testing (Aug 2023)
FreeBSD stable/13 Testing (Aug 2023) with OpenSSH_9.3p2

THIS GIST WAS MOVED TO TERMSTANDARD/COLORS REPOSITORY.

PLEASE ASK YOUR QUESTIONS OR ADD ANY SUGGESTIONS AS A REPOSITORY ISSUES OR PULL REQUESTS INSTEAD!

In August 2007 a hacker found a way to expose the PHP source code on facebook.com. He retrieved two files and then emailed them to me, and I wrote about the issue:

http://techcrunch.com/2007/08/11/facebook-source-code-leaked/

It became a big deal:

http://www.techmeme.com/070812/p1#a070812p1

The two files are index.php (the homepage) and search.php (the search page)

	:xdg-support: https://wiki.archlinux.org/index.php/XDG_Base_Directory
	:xdg-spec: https://specifications.freedesktop.org/basedir-spec/basedir-spec-latest.html
	:fhs: https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard
	:madness: http://pub.gajendra.net/2012/09/dotfiles
	:litter: https://www.reddit.com/r/linux/comments/971m0z/im_tired_of_folders_littering_my_home_directory/
	:systemd: https://www.freedesktop.org/wiki/Software/systemd/
	:systemd-fhs: https://www.freedesktop.org/software/systemd/man/file-hierarchy.html
	:systemd-fhs-bin: https://www.freedesktop.org/software/systemd/man/file-hierarchy.html#~/.local/bin/

	:toc: macro

	server:
	###########################################################################
	# BASIC SETTINGS
	###########################################################################
	# Time to live maximum for RRsets and messages in the cache. If the maximum
	# kicks in, responses to clients still get decrementing TTLs based on the
	# original (larger) values. When the internal TTL expires, the cache item
	# has expired. Can be set lower to force the resolver to query for data
	# often, and not trust (very large) TTL values.
	cache-max-ttl: 86400

	#!/bin/bash
	#
	# This file echoes a bunch of color codes to the terminal to demonstrate
	# what's available. Each line is the color code of one forground color,
	# out of 17 (default + 16 escapes), followed by a test use of that color
	# on all nine background colors (default + 8 escapes).
	#
	T='gYw' # The test text
	echo -e "\n 40m 41m 42m 43m 44m 45m 46m 47m";
	for FGs in ' m' ' 1m' ' 30m' '1;30m' ' 31m' '1;31m' ' 32m' '1;32m' ' 33m' '1;33m' ' 34m' '1;34m' ' 35m' '1;35m' ' 36m' '1;36m' ' 37m' '1;37m';