Yubico Forum

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-26T22:56:42+01:00

Thx Dain - this is great stuff!
I hereby confirm that this issue is now resolved with version 2.1.0 - thank you very much Dain for the quick fix which resolves this issue.

Kind regards, Erik...

Statistics: Posted by erikie — Fri Jun 26, 2015 10:56 pm

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-26T10:20:36+01:00

Hi! Thanks for providing the detailed output! I've now located the source of the issue. The problem is in the yubioath-desktop application, with it not being able to handle certain YubiKey NEO versions (you happen to have one of those). There is nothing wrong with the device itself, it's just a bug in the software related to non-ascii characters. I will release a new version of yubioath-desktop which should resolve this issue. If not today, then early next week!

EDIT: It's out, version 2.1.0.

Statistics: Posted by dain — Fri Jun 26, 2015 10:20 am

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-26T09:33:35+01:00

Dain,

I wonder whether deleting and re-installing the oath applet might resolve this issue?
This yubikey is still one of those in which the apps are not locked - i.e. can load & delete apps on it.
Please advise...

KR, Erik...

Statistics: Posted by erikie — Fri Jun 26, 2015 9:33 am

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-25T19:48:36+01:00

Changed it back to YubiKey NEO without seemingly ill effects however issue remains the same.
Apparently this faulty string is not (directly) related to the string which can be chnaged in the neomanager utility.

Statistics: Posted by erikie — Thu Jun 25, 2015 7:48 pm

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-25T19:42:09+01:00

Attemoted to rename the NEO (from YubiKey NEO to NEO) however the python output remains the same - it appears this output is not affcted by the name change.
I have included a screenshot with the output from python and also (started after the python script) from neomanager which clearly shows that the name is changed but the python output is not.

Statistics: Posted by erikie — Thu Jun 25, 2015 7:42 pm

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-25T18:19:01+01:00

I spot a difference here:
- good key reply:
['Yubico Yubikey NEO OTP+CCID 00 00']

- bad key reply:
['Yubico Yubikey NEO OTP+CCID (Ð) 00 00']

Could this be the issue causing the key (and/or software) to malfunction?
Is there a method to update the key so as to remove these extraneous characters?

Thx & kind regards, Erik...

Statistics: Posted by erikie — Thu Jun 25, 2015 6:19 pm

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-25T18:13:24+01:00

Dain,

as requested:

- good behaving key 1891578

Code:

(debian-jessie-encrypted)erikie@localhost:~$ python
Python 2.7.9 (default, Mar  1 2015, 12:57:24) 
[GCC 4.9.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from smartcard import System
>>> System.readers()
['Yubico Yubikey NEO OTP+CCID 00 00']
>>> 
(debian-jessie-encrypted)erikie@localhost:~$ ykinfo -a
serial: 1891578
serial_hex: 1cdcfa
serial_modhex: brtrvl
version: 3.1.2
touch_level: 1551
programming_sequence: 3
slot1_status: 1
slot2_status: 1
vendor_id: 1050
product_id: 111
(debian-jessie-encrypted)erikie@localhost:~$ 

- bad behaving key 2276401

Code:

(debian-jessie-encrypted)erikie@localhost:~$ python
Python 2.7.9 (default, Mar  1 2015, 12:57:24) 
[GCC 4.9.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from smartcard import System
>>> System.readers()
['Yubico Yubikey NEO OTP+CCID (Ð) 00 00']
>>> 
(debian-jessie-encrypted)erikie@localhost:~$ ykinfo -a
serial: 2276401
serial_hex: 22bc31
serial_modhex: ddnreb
version: 3.2.0
touch_level: 1285
programming_sequence: 1
slot1_status: 1
slot2_status: 0
vendor_id: 1050
product_id: 111
(debian-jessie-encrypted)erikie@localhost:~$

Thx & kind regards, Erik...

Statistics: Posted by erikie — Thu Jun 25, 2015 6:13 pm

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-25T08:59:41+01:00

Can you try running the following commands in a terminal and copy the output? I've highlighted the actual commands you need to type in red.

Quote:

$ python
Python 2.7.9 (default, Apr 2 2015, 15:34:55)
[GCC 4.9.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from smartcard import System
>>> System.readers()
['Yubico Yubikey NEO OTP+U2F+CCID 00 00']
>>>

Please do it once with the functioning key inserted, and once with the non-functioning one.

Statistics: Posted by dain — Thu Jun 25, 2015 8:59 am

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-24T23:22:19+01:00

Dain,

first of all thx for your quick response.
Now back on topic - for both yubikeys the name reported is: Yubikey Neo.
Nevertheless I attempted to change the name again to Yubikey Neo again which was accepted by the yubikey & unplugged/replugged it again.
Then attempted to execute the yubiauth app with the same results again for this key.
If I first start the yubiauth app and then insert the yubikey (the one with the weird behaviour that is) the app keep on functioning however the credentials never show up.

The cardreader field in the yubiauth app has value: Yubikey for both keys.

I have uploaded screenshots of the neomanager tool as well as the yubi auth tool.

FYI I have some additional info obtained with ykinfo:
- ¨good¨ behaving key:

Code:

(debian-jessie-encrypted)erikie@localhost:~$ ykinfo -a
serial: 1891578
serial_hex: 1cdcfa
serial_modhex: brtrvl
version: 3.1.2
touch_level: 1551
programming_sequence: 3
slot1_status: 1
slot2_status: 1
vendor_id: 1050
product_id: 111
(debian-jessie-encrypted)erikie@localhost:~$ 

- ¨bad¨ behaving key:

Code:

(debian-jessie-encrypted)erikie@localhost:~$ ykinfo -a
serial: 2276401
serial_hex: 22bc31
serial_modhex: ddnreb
version: 3.2.0
touch_level: 1285
programming_sequence: 1
slot1_status: 1
slot2_status: 0
vendor_id: 1050
product_id: 111
(debian-jessie-encrypted)erikie@localhost:~$

Anyway - thx for your time & effort in addressing this issue and hopefully you'll be able to fix and publis the yubiauth app as you indicated!

Kind regards, Erik...

Statistics: Posted by erikie — Wed Jun 24, 2015 11:22 pm

Re: weird issue with 2 yubikey neo's with yubioath desktop a

2015-06-23T14:05:27+01:00

Looking at the traceback it looks like there is an issue with the smartcard reader name comparison, namely that it doesn't handle non-ascii characters. This is a bug in the application, which I will fix in the next version, but it's also strange as there usually aren't any non-ascii characters in the card reader name. If you start the application without any YubiKey attached, you most likely won't get the error. Doing so should allow you to open the settings dialog to check on the value of the "Card reader name". If it contains anything weird, change it to read "Yubikey" (with a capital "Y") then save the settings and restart the application and see if the problem goes away. Also, do you have any other smartcard readers connected to the computer?

Statistics: Posted by dain — Tue Jun 23, 2015 2:05 pm

weird issue with 2 yubikey neo's with yubioath desktop app

2015-06-21T15:25:16+01:00

Hello,

I have a strange issue with 2 yubikey neo's with the yubioath desktop app in Linux:
1) I have a yubikey neo (serialno 1891578) which functions normally with the yubioath app.
I have loaded 2 GoogleMail 2FA TOTP cedentials which function normally in this app and also on my android phone with NFC (using the androi version).
2) however I have a newer yubikey neo (serialno 2276401) with the same 2 credentials which does function normally on my android phone with NFC but does NOT function with the linux desktop version.
In fact I execute the yubioath from the command line nothing is reported using the older neo (serial 1891578) but with using the new version (serial 2276401) the following error is reported on the CLI:

Code:

(debian-jessie-encrypted)erikie@localhost:~$ yubioath
Traceback (most recent call last):
  File "/usr/bin/yubioath", line 8, in 
    main.main()
  File "/usr/lib/python2.7/dist-packages/yubioath/gui/main.py", line 228, in main
    app = YubiOathApplication()
  File "/usr/lib/python2.7/dist-packages/yubioath/gui/main.py", line 111, in __init__
    self._controller = GuiController(self, self._settings)
  File "/usr/lib/python2.7/dist-packages/yubioath/gui/controller.py", line 176, in __init__
    self.watcher = observe_reader(self.reader_name, self._on_reader)
  File "/usr/lib/python2.7/dist-packages/yubioath/gui/ccid.py", line 135, in observe_reader
    return CardWatcher(reader_name, callback)
  File "/usr/lib/python2.7/dist-packages/yubioath/gui/ccid.py", line 87, in __init__
    self._update(System.readers(), [])
  File "/usr/lib/python2.7/dist-packages/yubioath/gui/ccid.py", line 96, in _update
    if self.reader_name in reader.name:
UnicodeDecodeError: 'ascii' codec can't decode byte 0xd0 in position 29: ordinal not in range(128)
QThread: Destroyed while thread is still running
(debian-jessie-encrypted)erikie@localhost:~$ 

Could anyone indicate what could be the cause of this issue?

For the record I use the following software versions:
- yubikey neo developer version serial 1891578 & 2276401
- yubioath 2.0.2
- debian version 8
- using yubico ppa from Ubuntu Utopic:
deb http://ppa.launchpad.net/yubico/stable/ubuntu/ utopic main
deb-src http://ppa.launchpad.net/yubico/stable/ubuntu/ utopic main

To add some more info to this issue: the piv-tool appears to be able to talk to new yubikey despite the fact the yubioath is not.
All the app (CAP files) came pre-installed on this yubikey neo.

Any help pointing me in the right direction in solving this issue would be very much appreciated.

Statistics: Posted by erikie — Sun Jun 21, 2015 3:25 pm