pamusb.conf

<?xml version="1.0" ?><!--
pamusb.conf: Configuration file for pam_usb.

See http://www.pamusb.org/doc/configuring
--><configuration>
	<!-- Default options -->
	<defaults>
		<!-- Example:
			<option name="debug">true</option>
		-->
	</defaults>

	<!-- Device settings -->
	<devices>
		<!-- Example:
		Note: You should use pamusb-conf to add devices automatically.
		<device id="MyDevice">
			<vendor>SanDisk Corp.</vendor>
			<model>Cruzer Titanium</model>
			<serial>SNDKXXXXXXXXXXXXXXXX</serial>
			<volume_uuid>6F6B-42FC</volume_uuid>
			<option name="probe_timeout">10</option>
		</device>
		-->
	<device id="MyDevice">
	<vendor>Kingston</vendor>
	<model>DataTraveler 3.0</model>
	<serial>E0D55EA573CCF4A0C87A0414</serial>
	<volume_uuid>5260-4477</volume_uuid>
</device></devices>


	<!-- User settings -->
	<users>
		<!-- Note: Use pamusb-conf to add a user, then you can tweak
		 	manually the configuration here if needed.
		-->

		<!-- Example:
			Authenticate user scox using "MyDevice", and configure pamusb-agent
			to automatically start/stop gnome-screensaver on key insertion and
			removal:
			<user id="scox">
				<device>MyDevice</device>
				<option name="quiet">true</option>
				<agent event="lock">gnome-screensaver-command -\-lock</agent>
				<agent event="unlock">gnome-screensaver-command -\-deactivate</agent>
			</user>

			Configure user root to authenticate using MyDevice, but update one
			time pads at every login (default is 1 hour):
			<user id="root">
				<device>MyDevice</device>
				<option name="pad_expiration">0</option>
			</user>
		-->
	<user id="kuromesi">
	<device>MyDevice</device>
	<password_auth>false</password_auth>
	<agent event="lock">/usr/local/bin/screensaver-lock</agent>
	<agent event="unlock">/usr/local/bin/screensaver-unlock</agent>
</user></users>

	<!-- Services settings (e.g. gdm, su, sudo...) -->
	<services>
		<!-- Example: Speed up hotplugging by disabling one time pads -->
		<!--
		<service id="pamusb-agent">
			<option name="one_time_pad">false</option>
		</service>
		-->

		<!-- Disable output for 'su' (needed for gksu) -->
		<!--
		<service id="su">
			<option name="quiet">true</option>
		</service>
		-->
	</services>
</configuration>