From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id uG8TAa5V0mRJgAEASxT56A (envelope-from ) for ; Tue, 08 Aug 2023 16:48:14 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id YH4MAa5V0mS4AwAA9RJhRA (envelope-from ) for ; Tue, 08 Aug 2023 16:48:14 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id A299E3F2C5 for ; Tue, 8 Aug 2023 16:48:13 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20221208 header.b=rxGgys9I; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1691506093; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=OWQ/Z2RV25jvmRtgF3+JzYSBkjCKjbwVn8pEgYxwif8=; b=ndb2kskokmfRtRS51yVO5gXnlpbQl2+KttFetK9AW6Elf5TqJmc5sMT/YtlCxnAG+HU7Aj oGr0mKlm+stp+lDb/2wt9P/gFxNrPR2o5gP+CnTmo1sU0t0EograpZjq073itOW4BIsUWr Jvpx3RY+2GcpFHxAvQZsQXYVkBfTAgsL0M+UiotMHR92BpxbTPcKH0wCwhAgfAERKiv/OF KV7x6wPqBR+00VLMR+R0Qv3tAX3mRLumuSMWwsPdFnNrBCS8GvlLn4wrmPmRc8u5Oc9yXn fdVE/I1uIZgqIL0/9Vhg1gDb1qQiJGaFqDx+wmrHlm+ov16vSoGmulxLfgqTug== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20221208 header.b=rxGgys9I; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1691506093; a=rsa-sha256; cv=none; b=IHasrxfOnQAYmItH0AqALR7464O/Dva5quW8hYcmM+1c+SmUOAMtSJXEmmd6DlJt0ui14u 0RGuqf1DazTlINdtZvXOWns7IqGAmY43aiUxuusp01QqKb5z22njDUS3Z017T9WSzbSiYa 6A3wKc7o/3qt4fupYNmB6qi7p8NQlouKEoLPk4//OsYfaqtlLaJ3sx9MsT01OUbfWkIQtm eA6gq5LGhNm4sjYwIF45QcE/EAJw951gTvq2nBf18ypZc9nBqLpwDLI6Hgf5YuM/Pch1aa aRnM6RhiuqXmGlxI1wsWT48+DEUyz0knapLZkVdpfAVKVDzYNInN3v6IpMh5jg== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qTO0B-0000i8-PZ; Tue, 08 Aug 2023 10:48:03 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qTO0A-0000e5-DQ for guix-patches@gnu.org; Tue, 08 Aug 2023 10:48:02 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qTO0A-00016o-51 for guix-patches@gnu.org; Tue, 08 Aug 2023 10:48:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qTO09-0005Zg-Om for guix-patches@gnu.org; Tue, 08 Aug 2023 10:48:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#64882] [PATCH] doc: cookbook: Document how to disable the Yubikey OTP application. References: <5de34b432e5a0fe9cb3728184e6f7a9dd2f38eaf.1690401404.git.maxim.cournoyer@gmail.com> In-Reply-To: <5de34b432e5a0fe9cb3728184e6f7a9dd2f38eaf.1690401404.git.maxim.cournoyer@gmail.com> Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 08 Aug 2023 14:48:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 64882 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 64882@debbugs.gnu.org Cc: Maxim Cournoyer Received: via spool by 64882-submit@debbugs.gnu.org id=B64882.169150606921385 (code B ref 64882); Tue, 08 Aug 2023 14:48:01 +0000 Received: (at 64882) by debbugs.gnu.org; 8 Aug 2023 14:47:49 +0000 Received: from localhost ([127.0.0.1]:37460 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qTNzw-0005Yr-Qb for submit@debbugs.gnu.org; Tue, 08 Aug 2023 10:47:49 -0400 Received: from mail-ua1-x92d.google.com ([2607:f8b0:4864:20::92d]:52430) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qTNzu-0005YM-6N for 64882@debbugs.gnu.org; Tue, 08 Aug 2023 10:47:46 -0400 Received: by mail-ua1-x92d.google.com with SMTP id a1e0cc1a2514c-79a41b1bccfso1595998241.0 for <64882@debbugs.gnu.org>; Tue, 08 Aug 2023 07:47:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1691506060; x=1692110860; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=OWQ/Z2RV25jvmRtgF3+JzYSBkjCKjbwVn8pEgYxwif8=; b=rxGgys9IzutlIj3dPKKOJ2YIWaL+6MCnLmpI8MaAn00BvT6FIzvNMQq53yuU5Cle6h zl0L9yQMiz3RmQrU5wXB7LKOSIUSJpCFmy4RDmxbMRpWE5HDElHQ55jfJp8G2caWiqVf PtKEWFF3EVH3PN0nXLGmpIdhaq50jvZfF92J+4JXkUlGKzxiA6qfmnsRNwzNwYy+OyG7 lAifoHrFzbT/U1ZT6I3lKKYxYKGc9LcYXwp1Ns2tYBe0+biqCl+FtJDBvw/Eq3OjqMVI mAjcY6hD6habPmxXK4GykmCGd1NhudWrR3XzmBimry6oW+qFp2bIbGseT8I03CeySAJq mwig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1691506060; x=1692110860; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=OWQ/Z2RV25jvmRtgF3+JzYSBkjCKjbwVn8pEgYxwif8=; b=deF++WSUULvfm3dHb3TmYlWt/mcwaNgt7rABFSk187JbQ96GPxf6cWWvULCjpnBqnQ BkpsvUqfdPcUGrxwtfUnq3VopDx8HtdvoYks3q7MGdnsISEbAcmqYUmdkjpCJHmZF+q9 1cved/4L+B02Cz6WWNMZFIQKqCPgj950UfagbYuihc2caXwuOJkEnlgbluQbF2lg0fLO 8nw7IlW/PMdvhWLW8a1W7ZE6zmUrbJZk25eiBQ/KzOiga1VFCakpOPb4Q5oNcrEegcqx 4u9+jcIuRuxIMPYCGGvXPy79Tia0HTwmSAgT7Jiz+bZ2VjelYIuMRs+4b4YVoGd2ifhi OkQg== X-Gm-Message-State: AOJu0YzmBJlZrPFgWDV5USkh1urjuaL0pRNZ0XyzTPx78g582fa4563X jOSaz/kpXlFRVHYQPUXLpJ+AJ4509ZbZ4Q== X-Google-Smtp-Source: AGHT+IGMvOGwh6sOgeo39vL0dEYERCtnyRoRcd3asPdGx8hZCcY1AZgOqg1aYPA9tfcgFVkkReWlAQ== X-Received: by 2002:a05:6102:144:b0:443:5f6e:c1b5 with SMTP id a4-20020a056102014400b004435f6ec1b5mr25259vsr.18.1691506060342; Tue, 08 Aug 2023 07:47:40 -0700 (PDT) Received: from localhost.localdomain (dsl-10-130-49.b2b2c.ca. [72.10.130.49]) by smtp.gmail.com with ESMTPSA id n7-20020a0cdc87000000b0063d152e5d9asm3688009qvk.120.2023.08.08.07.47.39 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Aug 2023 07:47:39 -0700 (PDT) From: Maxim Cournoyer Date: Tue, 8 Aug 2023 10:47:32 -0400 Message-ID: <910f04641befc692ff94aff69cdd200193c69fd1.1691506052.git.maxim.cournoyer@gmail.com> X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: A299E3F2C5 X-Migadu-Scanner: mx1.migadu.com X-Spam-Score: 2.83 X-Migadu-Spam-Score: 2.83 X-TUID: N2R5o3fXj89s * doc/guix-cookbook.texi (Using security keys) : New subsection. Series-to: 64882@debbugs.gnu.org Series-version: 2 Series-changes: 2 - Mention alternative using the graphical yubikey-manager-qt application --- doc/guix-cookbook.texi | 20 +++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) diff --git a/doc/guix-cookbook.texi b/doc/guix-cookbook.texi index 2e58c6c795..4d85dee386 100644 --- a/doc/guix-cookbook.texi +++ b/doc/guix-cookbook.texi @@ -21,7 +21,7 @@ Copyright @copyright{} 2020 André Batista@* Copyright @copyright{} 2020 Christine Lemmer-Webber@* Copyright @copyright{} 2021 Joshua Branson@* -Copyright @copyright{} 2022 Maxim Cournoyer@* +Copyright @copyright{} 2022, 2023 Maxim Cournoyer@* Copyright @copyright{} 2023 Ludovic Courtès Permission is granted to copy, distribute and/or modify this document @@ -2022,6 +2022,24 @@ Using security keys ready to be used with applications supporting two-factor authentication (2FA). +@subsection Disabling OTP code generation for a Yubikey +@cindex disabling yubikey OTP +If you use a Yubikey security key and are irritated by the spurious OTP +codes it generates when inadvertently touching the key (e.g. causing you +to become a spammer in the @samp{#guix} channel when discussing from +your favorite IRC client!), you can disable it via the following +@command{ykman} command: + +@example +guix shell python-yubikey-manager -- ykman config usb --force --disable OTP +@end example + +Alternatively, you could use the @command{ykman-gui} command from the +@code{yubikey-manager-qt} package and either wholly disable the +@samp{OTP} application from the USB interface or, from the +@samp{Applications -> OTP} view, delete the configuration of slot 1, +which comes pre-configured with the Yubico OTP application. + @node Connecting to Wireguard VPN @section Connecting to Wireguard VPN base-commit: 782ef67a59f4b564f16101cf23c30a3777b3f734 -- 2.41.0