| Yubico Forum https://forum.yubico.com/ |
|
| Neo and U2F - Fedora Linux https://forum.yubico.com/viewtopic.php?f=26&t=1535 |
Page 1 of 2 |
| Author: | gbcox [ Wed Oct 22, 2014 7:13 pm ] |
| Post subject: | Neo and U2F - Fedora Linux |
OK, just received and having a few issues: 1. There are no instructions on how to install the Neo Manager software in Linux... there is a link: https://www.yubico.com/wp-content/uploa ... ey-NEO.pdf and you download the files and look at the readme, it doesn't say what to do. So, I installed the windows version to activate. 2. After that, it basically doesn't work. I run through the demo: http://demo.yubico.com/start/u2f/neo plug in the yubikey, there isn't a solid light. Nothing. When I try the demo, it blinks a very slow, rapid blink. I get the annoying message from chrome do I want Yubikey to access my securty keys. I press Allow. I see this message: {"challenge": "ymsTWIXA1Ibtx6xVsC8hnBHOyxcmc5GNge27I0YdbPo", "version": "U2F_V2", "appId": "http://demo.yubico.com"} I press the button on the yubikey, nothing happens and finally get this message: Traceback (most recent call last): File "/root/python-u2flib-server-demo/examples/yubiauth_server.py", line 130, in __call__ raise Exception("FIDO Client error: %s" % error) Exception: FIDO Client error: 5 (TIMEOUT) Is this working for anybody? I'm using Chrome: Version 40.0.2194.2 dev (64-bit) FIDO U2F (Universal 2nd Factor) extension 0.8.68.2 |
|
| Author: | jskvbinmv3 [ Wed Oct 22, 2014 9:15 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
Sounds a lot like what I am getting when trying U2F in Ubuntu. (viewtopic.php?f=26&t=1532) I managed to use U2F when running Chrome as root but I'm not so much into messing around with the system... so if you find a way around this let me know. |
|
| Author: | gbcox [ Wed Oct 22, 2014 9:27 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
Thanks for the comment. I also have a Windows 7 machine running in Virtual Box. Same issue... so it isn't just Linux. |
|
| Author: | jskvbinmv3 [ Wed Oct 22, 2014 9:37 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
I think it is some usb permission thing in Linux causing this. I am not sure how this would also have effect on Windows running in a VM on Linux. Concerning your issue configuring the yubikey: You can find the personalization tool here: http://yubico.github.io/yubikey-persona ... eases.html and the manpage here: http://yubico.github.io/yubikey-persona ... ize.1.html |
|
| Author: | Tom [ Thu Oct 23, 2014 10:37 am ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
What Yubikey you have NEO or Security KEY ? Did you unlock your Yubikey to enable u2f? https://www.yubico.com/wp-content/uploa ... ey-NEO.pdf Is your Yubikey in MODE 3? If it is a Blue Security Key, please contact https://www.yubico.com/support/raise-ticket/ |
|
| Author: | gbcox [ Thu Oct 23, 2014 3:47 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
Tom wrote: What Yubikey you have NEO or Security KEY ? Did you unlock your Yubikey to enable u2f? https://www.yubico.com/wp-content/uploa ... ey-NEO.pdf Is your Yubikey in MODE 3? If it is a Blue Security Key, please contact https://www.yubico.com/support/raise-ticket/ I have both. Below is the output from dmesg. As you can see, the Neo has MODE 3 enabled. I get the same result from both. I'll open a ticket. [75938.244547] usb 7-2: new full-speed USB device number 22 using ohci-pci [75938.399533] usb 7-2: New USB device found, idVendor=1050, idProduct=0115 [75938.399541] usb 7-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [75938.399545] usb 7-2: Product: Yubikey NEO U2F+CCID [75938.399549] usb 7-2: Manufacturer: Yubico [75938.407607] hid-generic 0003:1050:0115.001E: hiddev0,hidraw5: USB HID v1.10 Device [Yubico Yubikey NEO U2F+CCID] on usb-0000:00:16.0-2/input0 [76050.877454] usb 7-2: USB disconnect, device number 22 [76056.277190] usb 7-2: new full-speed USB device number 23 using ohci-pci [76056.432105] usb 7-2: New USB device found, idVendor=1050, idProduct=0120 [76056.432112] usb 7-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [76056.432117] usb 7-2: Product: Security Key by Yubico [76056.432120] usb 7-2: Manufacturer: Yubico [76056.440258] hid-generic 0003:1050:0120.001F: hiddev0,hidraw5: USB HID v1.10 Device [Yubico Security Key by Yubico] on usb-0000:00:16.0-2/input0 |
|
| Author: | Tom [ Thu Oct 23, 2014 3:56 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
You will need a new udev rule for the u2f device https://github.com/Yubico/libu2f-host/b ... -u2f.rules dump this into: /etc/udev/rules.d/ |
|
| Author: | gbcox [ Thu Oct 23, 2014 5:25 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
Tom wrote: You will need a new udev rule for the u2f device https://github.com/Yubico/libu2f-host/b ... -u2f.rules dump this into: /etc/udev/rules.d/ Tom, I created a file called 70-u2f.rules and put it into the directory /etc/udev/rules.d Rebooted the system Tried again with both keys, same results. |
|
| Author: | gbcox [ Thu Oct 23, 2014 6:02 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
I also found this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1155826 It is a request to review the package libu2f for Fedora. I went ahead and built it for my system and installed both libu2f and u2f-hosts. Didn't seem to have any effect. |
|
| Author: | jskvbinmv3 [ Thu Oct 23, 2014 6:54 pm ] |
| Post subject: | Re: Neo and U2F - Fedora Linux |
gbcox wrote: Tom wrote: You will need a new udev rule for the u2f device https://github.com/Yubico/libu2f-host/b ... -u2f.rules dump this into: /etc/udev/rules.d/ Tom, I created a file called 70-u2f.rules and put it into the directory /etc/udev/rules.d Rebooted the system Tried again with both keys, same results. So did I, as you told me over here. Downloaded the file and put it into /etc/udev/rules.d/ . No effect. U2F is still possible for root only. I've got the ppa added to the repositories and installed the personalization tools from there. Edit: I am sorry. This did in fact solve part of the problem. It works in U2F Mode now. However having HID, CCID and U2F activated it still does not. (chrome beta 39.0xx) |
|
| Page 1 of 2 | All times are UTC + 1 hour |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|