@include common-auth # For YubiKey add line : auth required pam_u2f.so # debug debug_file=/var/log/pam_u2f.log