use finger id for sudo mac code example
Example: mac command touch id
Open Terminal
Switch to the root user with sudo su -
Edit the /etc/pam.d/sudo file with a command-line editor such as vim or nano
The contents of this file should look like one of the following examples:
auth required pam_opendirectory.so
account required pam_permit.so
password required pam_deny.so
session required pam_permit.so
auth sufficient pam_smartcard.so
auth required pam_opendirectory.so
account required pam_permit.so
password required pam_deny.so
session required pam_permit.so
You need to add an additional auth line to the top so it now looks like this:
auth sufficient pam_tid.so
auth sufficient pam_smartcard.so
auth required pam_opendirectory.so
account required pam_permit.so
password required pam_deny.so
session required pam_permit.so