The Pico project is liberating humanity from passwords. See https://www.mypico.org
pam_pico offers a pam module for authentication.
For more details on the pam_pico code and how to build the entire Pico stack, see the developer docs.
https://docs.mypico.org/developer/
If you want to build all the Pico components from source in one go, without having to worry about the details, see:
https://github.com/mypico/pico-build-all
If you're using Ubunutu 16.04 you can install directly from the Pico repository. Just add the repository:
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 22991E96
sudo add-apt-repository "deb https://get.mypico.org/apt/ xenial main"
sudo apt update
then install pam_pico:
sudo apt install libpam-pico
You'll need to ensure you've installed the build dependencies before you attempt to compile and install pam_pico. This includes building and installing libpicobt and libpico from the Pico repositories. See the libpicobt and the libpico repositories for instructions for this.
If you're using Ubuntu 16.04, you can install the remaining build dependencies using apt.
sudo apt install \
libssl-dev libcurl4-openssl-dev libqrencode-dev libbluetooth-dev liburl-dispatcher1-dev libc6 \
libsoup2.4-dev libglib2.0-dev libdbus-glib-1-dev libgtk-3-dev libpam0g-dev gksu \
autoconf pkg-config autotools-dev devscripts debhelper dh-systemd dh-exec build-essential \
git gcc make check openssh-client libtool doxygen graphviz
Assuming you've got all these, download the latest version from the git repository and move inside the project folder.
git clone [email protected]:mypico/pam_pico.git
cd pam_pico
You can now build using autoconf with the following commands:
./configure
make
After this, the cleanest way to install it is to build the deb or rpm package and install that:
debuild -us -uc -b --lintian-opts -X changes-file
sudo dpkg -i ../libpam-pico_0.0.2-1_amd64.deb
For info about how to use pam_pico see the developer documentation on configuring pam_pico and pairing it with your Pico.
The package installs the pico-continuous service to support continuous authentication. Systemd support is included for managiing the service. The following commnds can be used.
Check status:
systemctl status pico-continuous.service
sudo journalctl -u pico-continous
gdbus introspect --system --dest uk.ac.cam.cl.pico.service --object-path /PicoObject
Start, stop, reload, enable, disable:
systemctl start pico-continuous.service
systemctl stop pico-continuous.service
systemctl daemon-reload
systemctl enable pico-continuous.service
systemctl disable pico-continuous.service
The systemd unit configuration can be found at:
/lib/systemd/system/pico-continuous.service
The dbus policy that allows the service to use the system bus can be found at:
/etc/dbus-1/system.d/uk.ac.cam.cl.pico.service.conf
pam_pico is released under the AGPL licence. Read COPYING for information.
We welcome comments and contributions to the project. If you're interested in contributing please see here: https://get.mypico.org/cla/
More information can be found at: https://mypico.org
The Pico project team at time of release:
- Frank Stajano (PI)
- David Llewellyn-Jones
- Claudio Dettoni
- Seb Aebischer
- Kat Krol
You can get in contact with us at [email protected]
We thank the European Research Council (ERC) for funding the Pico research through grant StG 307224 (Pico).