From patchwork Tue Aug 8 14:50:33 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Maxim Cournoyer X-Patchwork-Id: 52676 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id DACBE27BBEA; Tue, 8 Aug 2023 15:51:24 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED, DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FROM,MAILING_LIST_MULTI, SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 30C8F27BBE2 for ; Tue, 8 Aug 2023 15:51:24 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qTO35-00017e-C7; Tue, 08 Aug 2023 10:51:03 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qTO34-00017W-HL for guix-patches@gnu.org; Tue, 08 Aug 2023 10:51:02 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qTO33-0001u7-RI for guix-patches@gnu.org; Tue, 08 Aug 2023 10:51:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qTO33-0005kf-Mw for guix-patches@gnu.org; Tue, 08 Aug 2023 10:51:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#64882] [PATCH v2] doc: cookbook: Document how to disable the Yubikey OTP application. References: <5de34b432e5a0fe9cb3728184e6f7a9dd2f38eaf.1690401404.git.maxim.cournoyer@gmail.com> In-Reply-To: <5de34b432e5a0fe9cb3728184e6f7a9dd2f38eaf.1690401404.git.maxim.cournoyer@gmail.com> Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 08 Aug 2023 14:51:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 64882 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 64882@debbugs.gnu.org Cc: john.kehayias@protonmail.com, Maxim Cournoyer Received: via spool by 64882-submit@debbugs.gnu.org id=B64882.169150626122106 (code B ref 64882); Tue, 08 Aug 2023 14:51:01 +0000 Received: (at 64882) by debbugs.gnu.org; 8 Aug 2023 14:51:01 +0000 Received: from localhost ([127.0.0.1]:37473 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qTO32-0005kQ-SP for submit@debbugs.gnu.org; Tue, 08 Aug 2023 10:51:01 -0400 Received: from mail-qt1-x82c.google.com ([2607:f8b0:4864:20::82c]:60424) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qTO30-0005kB-Uy for 64882@debbugs.gnu.org; Tue, 08 Aug 2023 10:50:59 -0400 Received: by mail-qt1-x82c.google.com with SMTP id d75a77b69052e-4039f7e1d3aso44954941cf.0 for <64882@debbugs.gnu.org>; Tue, 08 Aug 2023 07:50:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1691506253; x=1692111053; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=tM9WqVOMcJRG+vgKSRm6bQBkSg36Zy95Dk1AEG1JK78=; b=jr9LTVI/xfpZbxIiuhInia6nu8tW9wVJHFs+mZ3yeIg/M/U0XdUBcaQ4o0N/8SQEP2 djxNwRZX/57GGZeafT+MAcCMw5f5H07MqQI5lPCISjFHqFyaxP1H8oIb9IzDXyTk/SKo ak5Xk+ZBsBGEx6m5oI46jupQ9IXgaRFX6AlSu1SjgyQNyLxg4FNN+0dg41vmpgmpRmww 0u6nEmoXEPVpWixXf+7Gx0h3leKfCF7gnWVuPbzMgUPnohA2QUhodym/FetFZI7qVuft GRcnopRZNum3LgG3DS3jRpT5M7tM24Lx4ZcxRcM+Mcv9PB1Cqcd89p97Hw3yY+/oYTUc TrUw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1691506253; x=1692111053; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=tM9WqVOMcJRG+vgKSRm6bQBkSg36Zy95Dk1AEG1JK78=; b=R0+FhxCrOPG1fJLGiB02D0PBj9KcWS+05YxYsSSDvA72gVY+GXK2mK3JhPMt38yvTI sqfeQuOMWUsqSCxDp/veuV0oWs49keC+f18rjffrQ6y4YrWJN76zUi1k93PwgHgBbY9y JJ/ZN+6y9BJEO8m2FdTaqzu5hgwCnaNkWSPFkEDvBzMTr1TjjMxWXpwpnRxOEzwsgept OJOLc1KL4uBqpB9bVXuv7c/QsO+yO2IoWhViEXlhFAPO28YBl7fS6FTu7CvKVfKyLbFX TlGGLPDFkdwZOeV6SijPuGyx4xdR//WHnVQ1vhtP6G7VJC8HRlEc8msX3ZlD7NlD7beU nE/g== X-Gm-Message-State: AOJu0Yzun+UotW+ItQb76bt6+qUBlz++Qdm181hd/v8XoEQ6Qz4KWl6g 9+R53TM9iTUEqu9t0kPEbYl81H+akoauqg== X-Google-Smtp-Source: AGHT+IHg7kZ8v/4gJOktSSDX7UgVeg3CzZHKl8aXLVQfC+bT/HFr/Nl+fIL8ZvUZAMAwtUQi2HK8Jg== X-Received: by 2002:a05:622a:107:b0:405:5cf5:7bf0 with SMTP id u7-20020a05622a010700b004055cf57bf0mr19950549qtw.53.1691506252943; Tue, 08 Aug 2023 07:50:52 -0700 (PDT) Received: from localhost.localdomain (dsl-10-130-49.b2b2c.ca. [72.10.130.49]) by smtp.gmail.com with ESMTPSA id k14-20020ac8604e000000b0040fefceb8d1sm3381070qtm.20.2023.08.08.07.50.52 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Aug 2023 07:50:52 -0700 (PDT) From: Maxim Cournoyer Date: Tue, 8 Aug 2023 10:50:33 -0400 Message-ID: <398929120819ad8639468de1c73835bb9af470ef.1691506232.git.maxim.cournoyer@gmail.com> X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * doc/guix-cookbook.texi (Using security keys) : New subsection. --- Changes in v2: - Mention alternative using the graphical yubikey-manager-qt application doc/guix-cookbook.texi | 20 +++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) base-commit: 782ef67a59f4b564f16101cf23c30a3777b3f734 diff --git a/doc/guix-cookbook.texi b/doc/guix-cookbook.texi index 2e58c6c795..4d85dee386 100644 --- a/doc/guix-cookbook.texi +++ b/doc/guix-cookbook.texi @@ -21,7 +21,7 @@ Copyright @copyright{} 2020 André Batista@* Copyright @copyright{} 2020 Christine Lemmer-Webber@* Copyright @copyright{} 2021 Joshua Branson@* -Copyright @copyright{} 2022 Maxim Cournoyer@* +Copyright @copyright{} 2022, 2023 Maxim Cournoyer@* Copyright @copyright{} 2023 Ludovic Courtès Permission is granted to copy, distribute and/or modify this document @@ -2022,6 +2022,24 @@ Using security keys ready to be used with applications supporting two-factor authentication (2FA). +@subsection Disabling OTP code generation for a Yubikey +@cindex disabling yubikey OTP +If you use a Yubikey security key and are irritated by the spurious OTP +codes it generates when inadvertently touching the key (e.g. causing you +to become a spammer in the @samp{#guix} channel when discussing from +your favorite IRC client!), you can disable it via the following +@command{ykman} command: + +@example +guix shell python-yubikey-manager -- ykman config usb --force --disable OTP +@end example + +Alternatively, you could use the @command{ykman-gui} command from the +@code{yubikey-manager-qt} package and either wholly disable the +@samp{OTP} application from the USB interface or, from the +@samp{Applications -> OTP} view, delete the configuration of slot 1, +which comes pre-configured with the Yubico OTP application. + @node Connecting to Wireguard VPN @section Connecting to Wireguard VPN