| Yubico Forum https://forum.yubico.com/ |
|
| Neo and U2F - Fedora Linux https://forum.yubico.com/viewtopic.php?f=26&t=1535 |
Page 2 of 2 |
| Author: | gbcox [ Fri Oct 24, 2014 1:28 am ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
jskvbinmv3 wrote: Edit: I am sorry. This did in fact solve part of the problem. It works in U2F Mode now. However having HID, CCID and U2F activated it still does not. (chrome beta 39.0xx) Well, that's something. So where are the files for Fedora? Yubico? Looks like wasn't quite ready to be released. Looks like major parts are missing. |
|
| Author: | pushcx [ Fri Oct 24, 2014 6:35 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
I had this problem, too, on Ubuntu and was able to fix it: viewtopic.php?f=33&t=1545&p=5991#p5991 The rules file Yubico support linked to didn't work. See my post for a fixed version. I'll send a pull request with a fix to that repo. ETA: https://github.com/Yubico/libu2f-host/pull/4 |
|
| Author: | halstead [ Fri Oct 24, 2014 9:14 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
I have a new Yubikey NEO nano. I have it working for both openpgp and u2f in U2F+CCID mode on Ubuntu 14.04 after adding https://github.com/Yubico/libu2f-host/pull/4 to my udev rules. I made the same changes on my Fedora20 machine and neither u2f nor openpgp functions work. Reverting back to OTP+CCID allows openpgp to work without issue. Here is the output from journctl -xf Code: Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: new full-speed USB device number 9 using ehci-pci Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: New USB device found, idVendor=1050, idProduct=0115 Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: New USB device strings: Mfr=1, Product=2, SerialNumber=0 Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: Product: Yubikey NEO U2F+CCID Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: Manufacturer: Yubico Oct 24 12:01:09 fedora20.local kernel: hid-generic 0003:1050:0115.0006: hiddev0,hidraw0: USB HID v1.10 Device [Yubico Yubikey NEO U2F+CCID] on usb-0000:00:1d.0-1.2/input0 Oct 24 12:01:09 fedora20.local mtp-probe[7024]: checking bus 2, device 9: "/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1.2" Oct 24 12:01:09 fedora20.local mtp-probe[7024]: bus: 2, device: 9 was not an MTP device Oct 24 12:01:09 fedora20.local gnome-session[1665]: [5227:5257:1024/120109:ERROR:hid_service_linux.cc(166)] Cannot open '/dev/hidraw0': FILE_ERROR_ACCESS_DENIED Oct 24 12:01:17 fedora20.local systemd[1]: Starting PC/SC Smart Card Daemon... -- Subject: Unit pcscd.service has begun with start-up -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit pcscd.service has begun starting up. Oct 24 12:01:17 fedora20.local systemd[1]: Started PC/SC Smart Card Daemon. -- Subject: Unit pcscd.service has finished start-up -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit pcscd.service has finished starting up. -- -- The start-up result is done. Oct 24 12:01:17 fedora20.local pcscd[7034]: 00000000 utils.c:61:GetDaemonPid() Can't open /var/run/pcscd/pcscd.pid: No such file or directory Oct 24 12:01:20 fedora20.local kernel: usb 2-1.2: USB disconnect, device number 9 What should I try next? |
|
| Author: | halstead [ Sat Oct 25, 2014 4:16 am ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
So I just came back to this after dinner and solved it. FIrst I edited /etc/udev/rules.d/70-u2f.rules to contain the below without the GROUP argument since that doesn't apply on Fedora. Code: KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0664", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120" Next I copied the udev rule for yubikeys over, Code: cp /usr/lib/udev/rules.d/69-yubikey.rules /etc/udev/rules.d/ then added the new product strings to to so line 7 reads, Code: ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0010|0110|0111|0113|0114|0115|0116|0120", \ Remove and re-insert the Yubikey NEO. Now both the openpgp function and the U2F functions are working. I hope this helps other Fedora users. |
|
| Author: | gbcox [ Mon Oct 27, 2014 6:29 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
halstead wrote: So I just came back to this after dinner and solved it. FIrst I edited /etc/udev/rules.d/70-u2f.rules to contain the below without the GROUP argument since that doesn't apply on Fedora. Code: KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0664", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120" Next I copied the udev rule for yubikeys over, Code: cp /usr/lib/udev/rules.d/69-yubikey.rules /etc/udev/rules.d/ then added the new product strings to to so line 7 reads, Code: ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0010|0110|0111|0113|0114|0115|0116|0120", \ Remove and re-insert the Yubikey NEO. Now both the openpgp function and the U2F functions are working. I hope this helps other Fedora users. Thanks very much... works! I played around and found that /etc/udev/rules.d/70-u2f.rules doesn't appear to be needed. If I just changed /usr/lib/udev/rules.d/69-yubikey.rules as you described it appears to work just fine. You also don't need to copy it to /etc/udev/rules.d just leave it where it is... No need to make extra files if they aren't needed. |
|
| Author: | invisibleroads [ Mon Oct 26, 2015 7:10 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
The following setup works on Fedora 22. Quote: sudo dnf copr enable jjelen/yubikey-neo-manager
sudo dnf copr enable spartacus06/yubikey-utils sudo dnf list yubi* sudo dnf -y install yubikey-neo-manager yubioath-desktop yubikey-personalization-gui # Start yubikey-neo-manager neoman # Start yubioath-desktop sudo service pcscd start yubioath # Start yubikey-personalization-gui yubikey-personalization-gui |
|
| Author: | 3strands [ Mon Jan 11, 2016 10:20 am ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
I've tried that - Fedora 23 - but all I get is the below: $ /usr/bin/neoman Traceback (most recent call last): File "/usr/bin/neoman", line 3, in <module> from neoman import main ImportError: cannot import name main Any ideas? |
|
| Author: | jmw74 [ Thu May 05, 2016 12:34 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
3strands wrote: I've tried that - Fedora 23 - but all I get is the below: $ /usr/bin/neoman Traceback (most recent call last): File "/usr/bin/neoman", line 3, in <module> from neoman import main ImportError: cannot import name main Any ideas? I had the same issue. Turns out my failed attempt at installing from source was interfering. sudo rm -rf /usr/lib/python2.7/site-packages/yubikey_neo_manager-1.4.0-py2.7.egg/ Then running neoman again, I get ImportError: cannot import name QtWebKit, which is the same error I get when installing from source. So basically the rpm seems to add no value here. Edit: I got neoman running now. Again it was due to having installed eggs built from source, so python was picking up those instead of using the rpms. So I just removed /usr/lib/python2.7/site-packages/PySide-1.2.4-py2.7-linux-x86_64.egg/ and then neoman started working. |
|
| Page 2 of 2 | All times are UTC + 1 hour |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|