Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 6:31 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Wed Aug 14, 2013 11:37 am 
Offline

Joined: Thu Apr 18, 2013 8:24 pm
Posts: 8
Hello,

I use yubico-pam in challenge-response mode for local logins on Linux. Yubico-pam uses libyubikey (yubico-c) to access the key.

Now I've got an ACR122 USB NFC reader. Having installed pcscd, I got the openpgp functionality of the Neo working over NFC right out of the box.

However, apparently libyubikey does not know that the key can be reached via pcsc as an alternative to USB, so the PAM module cannot access the key over NFC (and probably ykpersonalize and friends won't work either).

Am I missing something? Or this functionality indeed isn't implemented? If the latter, what is the "official position" (plans, recommendations) on this matter? I might be able to make it work and submit patches to yubico-c (or yubico-pam?) but I'd rather first listen what the staff/others have to say.

Thank you,

Eugene


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed Aug 14, 2013 12:11 pm 
Offline
Site Admin
Site Admin

Joined: Thu Apr 19, 2012 1:45 pm
Posts: 148
Hello!

From Yubico's side we have no plans to implement something like this, but I'll describe a way this could be implemented (in a way that we'd be happy to merge back)..

First a bit of background, the two library components that we're talking about here is:
* libyubikey: software to do modhex encode/decode and decrypt OTP
* libykpers: software for actually talking with/programing a YubiKey

It should be possible to add a pcsc backend to libykpers (along the lines of https://github.com/Yubico/yubikey-perso ... ore_stub.c). In the current implementation backends are only selected at compile-time (as they're right now mutually-exclusive), to actually be usable this would have to be extended to a runtime selectable interface where the pam module could request which backend to use.

/klas


Top
 Profile  
Reply with quote  
PostPosted: Wed Aug 14, 2013 1:32 pm 
Offline

Joined: Thu Apr 18, 2013 8:24 pm
Posts: 8
Thanks for the explanation Klas. I'll see what I can do here.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 9 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group