Yubico Forum

Re: Neo and U2F - Fedora Linux

2016-05-05T12:34:56+01:00

3strands wrote:

I've tried that - Fedora 23 - but all I get is the below:

$ /usr/bin/neoman
Traceback (most recent call last):
File "/usr/bin/neoman", line 3, in
from neoman import main
ImportError: cannot import name main

Any ideas?

I had the same issue. Turns out my failed attempt at installing from source was interfering.

sudo rm -rf /usr/lib/python2.7/site-packages/yubikey_neo_manager-1.4.0-py2.7.egg/

Then running neoman again, I get ImportError: cannot import name QtWebKit, which is the same error I get when installing from source. So basically the rpm seems to add no value here.

Edit: I got neoman running now. Again it was due to having installed eggs built from source, so python was picking up those instead of using the rpms. So I just removed /usr/lib/python2.7/site-packages/PySide-1.2.4-py2.7-linux-x86_64.egg/ and then neoman started working.

Statistics: Posted by jmw74 — Thu May 05, 2016 12:34 pm

Re: Neo and U2F - Fedora Linux

2016-01-11T10:20:18+01:00

Statistics: Posted by 3strands — Mon Jan 11, 2016 10:20 am

Re: Neo and U2F - Fedora Linux

2015-10-26T19:10:15+01:00

The following setup works on Fedora 22.

Quote:

sudo dnf copr enable jjelen/yubikey-neo-manager
sudo dnf copr enable spartacus06/yubikey-utils
sudo dnf list yubi*
sudo dnf -y install yubikey-neo-manager yubioath-desktop yubikey-personalization-gui

# Start yubikey-neo-manager
neoman

# Start yubioath-desktop
sudo service pcscd start
yubioath

# Start yubikey-personalization-gui
yubikey-personalization-gui

Statistics: Posted by invisibleroads — Mon Oct 26, 2015 7:10 pm

Re: Neo and U2F - Fedora Linux

2014-10-27T18:29:51+01:00

halstead wrote:

So I just came back to this after dinner and solved it.

FIrst I edited /etc/udev/rules.d/70-u2f.rules to contain the below without the GROUP argument since that doesn't apply on Fedora.

Code:

KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0664", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120"

Next I copied the udev rule for yubikeys over,

Code:

cp /usr/lib/udev/rules.d/69-yubikey.rules /etc/udev/rules.d/

then added the new product strings to to so line 7 reads,

Code:

ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0010|0110|0111|0113|0114|0115|0116|0120", \

Remove and re-insert the Yubikey NEO.

Now both the openpgp function and the U2F functions are working.

I hope this helps other Fedora users.

Thanks very much... works!

I played around and found that /etc/udev/rules.d/70-u2f.rules doesn't appear to be needed. If I just changed
/usr/lib/udev/rules.d/69-yubikey.rules as you described it appears to work just fine. You also don't need to copy it to /etc/udev/rules.d just
leave it where it is...

No need to make extra files if they aren't needed.

Statistics: Posted by gbcox — Mon Oct 27, 2014 6:29 pm

Re: Neo and U2F - Fedora Linux

2014-10-25T04:16:30+01:00

So I just came back to this after dinner and solved it.

FIrst I edited /etc/udev/rules.d/70-u2f.rules to contain the below without the GROUP argument since that doesn't apply on Fedora.

Code:

KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0664", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120"

Next I copied the udev rule for yubikeys over,

Code:

cp /usr/lib/udev/rules.d/69-yubikey.rules /etc/udev/rules.d/

then added the new product strings to to so line 7 reads,

Code:

ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0010|0110|0111|0113|0114|0115|0116|0120", \

Remove and re-insert the Yubikey NEO.

Now both the openpgp function and the U2F functions are working.

I hope this helps other Fedora users.

Statistics: Posted by halstead — Sat Oct 25, 2014 4:16 am

Re: Neo and U2F - Fedora Linux

2014-10-24T21:14:25+01:00

I have a new Yubikey NEO nano. I have it working for both openpgp and u2f in U2F+CCID mode on Ubuntu 14.04 after adding https://github.com/Yubico/libu2f-host/pull/4 to my udev rules.

I made the same changes on my Fedora20 machine and neither u2f nor openpgp functions work. Reverting back to OTP+CCID allows openpgp to work without issue.

Here is the output from journctl -xf

Code:

Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: new full-speed USB device number 9 using ehci-pci
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: New USB device found, idVendor=1050, idProduct=0115
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: Product: Yubikey NEO U2F+CCID
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: Manufacturer: Yubico
Oct 24 12:01:09 fedora20.local kernel: hid-generic 0003:1050:0115.0006: hiddev0,hidraw0: USB HID v1.10 Device [Yubico Yubikey NEO U2F+CCID] on usb-0000:00:1d.0-1.2/input0
Oct 24 12:01:09 fedora20.local mtp-probe[7024]: checking bus 2, device 9: "/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1.2"
Oct 24 12:01:09 fedora20.local mtp-probe[7024]: bus: 2, device: 9 was not an MTP device
Oct 24 12:01:09 fedora20.local gnome-session[1665]: [5227:5257:1024/120109:ERROR:hid_service_linux.cc(166)] Cannot open '/dev/hidraw0': FILE_ERROR_ACCESS_DENIED
Oct 24 12:01:17 fedora20.local systemd[1]: Starting PC/SC Smart Card Daemon...
-- Subject: Unit pcscd.service has begun with start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit pcscd.service has begun starting up.
Oct 24 12:01:17 fedora20.local systemd[1]: Started PC/SC Smart Card Daemon.
-- Subject: Unit pcscd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit pcscd.service has finished starting up.
-- 
-- The start-up result is done.
Oct 24 12:01:17 fedora20.local pcscd[7034]: 00000000 utils.c:61:GetDaemonPid() Can't open /var/run/pcscd/pcscd.pid: No such file or directory
Oct 24 12:01:20 fedora20.local kernel: usb 2-1.2: USB disconnect, device number 9

What should I try next?

Statistics: Posted by halstead — Fri Oct 24, 2014 9:14 pm

Re: Neo and U2F - Fedora Linux

2014-10-24T18:35:37+01:00

I had this problem, too, on Ubuntu and was able to fix it: viewtopic.php?f=33&t=1545&p=5991#p5991

The rules file Yubico support linked to didn't work. See my post for a fixed version. I'll send a pull request with a fix to that repo.

ETA: https://github.com/Yubico/libu2f-host/pull/4

Statistics: Posted by pushcx — Fri Oct 24, 2014 6:35 pm

Re: Neo and U2F - Fedora Linux

2014-10-24T01:28:32+01:00

jskvbinmv3 wrote:

Edit: I am sorry. This did in fact solve part of the problem. It works in U2F Mode now. However having HID, CCID and U2F activated it still does not. (chrome beta 39.0xx)

Well, that's something. So where are the files for Fedora? Yubico? Looks like wasn't quite ready to be released. Looks like major parts are missing.

Statistics: Posted by gbcox — Fri Oct 24, 2014 1:28 am

Re: Neo and U2F - Fedora Linux

2014-10-23T18:54:29+01:00

gbcox wrote:

Tom wrote:

You will need a new udev rule for the u2f device

https://github.com/Yubico/libu2f-host/b ... -u2f.rules

dump this into:
/etc/udev/rules.d/

Tom,

I created a file called 70-u2f.rules and put it into the directory /etc/udev/rules.d

Rebooted the system

Tried again with both keys, same results.

So did I, as you told me over here. Downloaded the file and put it into /etc/udev/rules.d/ . No effect. U2F is still possible for root only.

I've got the ppa added to the repositories and installed the personalization tools from there.

Edit: I am sorry. This did in fact solve part of the problem. It works in U2F Mode now. However having HID, CCID and U2F activated it still does not. (chrome beta 39.0xx)

Statistics: Posted by jskvbinmv3 — Thu Oct 23, 2014 6:54 pm

Re: Neo and U2F - Fedora Linux

2014-10-23T18:02:55+01:00

I also found this bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1155826

It is a request to review the package libu2f for Fedora. I went ahead and built it for my system and installed both libu2f and u2f-hosts. Didn't seem to have any effect.

Statistics: Posted by gbcox — Thu Oct 23, 2014 6:02 pm

Re: Neo and U2F - Fedora Linux

2014-10-23T17:25:59+01:00

Tom wrote:

You will need a new udev rule for the u2f device

https://github.com/Yubico/libu2f-host/b ... -u2f.rules

dump this into:
/etc/udev/rules.d/

Tom,

I created a file called 70-u2f.rules and put it into the directory /etc/udev/rules.d

Rebooted the system

Tried again with both keys, same results.

Statistics: Posted by gbcox — Thu Oct 23, 2014 5:25 pm

Re: Neo and U2F - Fedora Linux

2014-10-23T15:56:27+01:00

You will need a new udev rule for the u2f device

https://github.com/Yubico/libu2f-host/b ... -u2f.rules

dump this into:
/etc/udev/rules.d/

Statistics: Posted by Tom — Thu Oct 23, 2014 3:56 pm

Re: Neo and U2F - Fedora Linux

2014-10-23T15:47:53+01:00

Tom wrote:

What Yubikey you have NEO or Security KEY ?

Did you unlock your Yubikey to enable u2f?
https://www.yubico.com/wp-content/uploa ... ey-NEO.pdf

Is your Yubikey in MODE 3?

If it is a Blue Security Key, please contact
https://www.yubico.com/support/raise-ticket/

I have both. Below is the output from dmesg. As you can see, the Neo has MODE 3 enabled. I get the same result from both. I'll open a ticket.

[75938.244547] usb 7-2: new full-speed USB device number 22 using ohci-pci
[75938.399533] usb 7-2: New USB device found, idVendor=1050, idProduct=0115
[75938.399541] usb 7-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[75938.399545] usb 7-2: Product: Yubikey NEO U2F+CCID
[75938.399549] usb 7-2: Manufacturer: Yubico
[75938.407607] hid-generic 0003:1050:0115.001E: hiddev0,hidraw5: USB HID v1.10 Device [Yubico Yubikey NEO U2F+CCID] on usb-0000:00:16.0-2/input0
[76050.877454] usb 7-2: USB disconnect, device number 22
[76056.277190] usb 7-2: new full-speed USB device number 23 using ohci-pci
[76056.432105] usb 7-2: New USB device found, idVendor=1050, idProduct=0120
[76056.432112] usb 7-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[76056.432117] usb 7-2: Product: Security Key by Yubico
[76056.432120] usb 7-2: Manufacturer: Yubico
[76056.440258] hid-generic 0003:1050:0120.001F: hiddev0,hidraw5: USB HID v1.10 Device [Yubico Security Key by Yubico] on usb-0000:00:16.0-2/input0

Statistics: Posted by gbcox — Thu Oct 23, 2014 3:47 pm

Re: Neo and U2F - Fedora Linux

2014-10-23T10:37:37+01:00

Statistics: Posted by Tom — Thu Oct 23, 2014 10:37 am

Re: Neo and U2F - Fedora Linux

2014-10-22T21:37:52+01:00

I think it is some usb permission thing in Linux causing this. I am not sure how this would also have effect on Windows running in a VM on Linux.

Concerning your issue configuring the yubikey:

You can find the personalization tool here: http://yubico.github.io/yubikey-persona ... eases.html
and the manpage here: http://yubico.github.io/yubikey-persona ... ize.1.html

Statistics: Posted by jskvbinmv3 — Wed Oct 22, 2014 9:37 pm