Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 5:58 pm

View unanswered posts | View active topics


Board index » Yubikey » Yubikey NEO

All times are UTC + 1 hour




Post new topic Reply to topic  Page 2 of 2
  [ 18 posts ]  Go to page Previous  1, 2
  Print view Previous topic | Next topic 
Author Message
gbcox
PostPosted: Fri Oct 24, 2014 1:28 am 
Offline

Joined: Thu Feb 27, 2014 11:38 pm
Posts: 7
jskvbinmv3 wrote:
Edit: I am sorry. This did in fact solve part of the problem. It works in U2F Mode now. However having HID, CCID and U2F activated it still does not. (chrome beta 39.0xx)


Well, that's something. So where are the files for Fedora? Yubico? Looks like wasn't quite ready to be released. Looks like major parts are missing.
Top
 Profile  
Reply with quote  

Share On:
Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

pushcx
PostPosted: Fri Oct 24, 2014 6:35 pm 
Offline

Joined: Fri Oct 24, 2014 5:23 pm
Posts: 4
I had this problem, too, on Ubuntu and was able to fix it: viewtopic.php?f=33&t=1545&p=5991#p5991

The rules file Yubico support linked to didn't work. See my post for a fixed version. I'll send a pull request with a fix to that repo.

ETA: https://github.com/Yubico/libu2f-host/pull/4
Top
 Profile  
Reply with quote  
halstead
PostPosted: Fri Oct 24, 2014 9:14 pm 
Offline

Joined: Mon Nov 25, 2013 11:17 pm
Posts: 4
I have a new Yubikey NEO nano. I have it working for both openpgp and u2f in U2F+CCID mode on Ubuntu 14.04 after adding https://github.com/Yubico/libu2f-host/pull/4 to my udev rules.

I made the same changes on my Fedora20 machine and neither u2f nor openpgp functions work. Reverting back to OTP+CCID allows openpgp to work without issue.

Here is the output from journctl -xf
Code:
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: new full-speed USB device number 9 using ehci-pci
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: New USB device found, idVendor=1050, idProduct=0115
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: Product: Yubikey NEO U2F+CCID
Oct 24 12:01:09 fedora20.local kernel: usb 2-1.2: Manufacturer: Yubico
Oct 24 12:01:09 fedora20.local kernel: hid-generic 0003:1050:0115.0006: hiddev0,hidraw0: USB HID v1.10 Device [Yubico Yubikey NEO U2F+CCID] on usb-0000:00:1d.0-1.2/input0
Oct 24 12:01:09 fedora20.local mtp-probe[7024]: checking bus 2, device 9: "/sys/devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1.2"
Oct 24 12:01:09 fedora20.local mtp-probe[7024]: bus: 2, device: 9 was not an MTP device
Oct 24 12:01:09 fedora20.local gnome-session[1665]: [5227:5257:1024/120109:ERROR:hid_service_linux.cc(166)] Cannot open '/dev/hidraw0': FILE_ERROR_ACCESS_DENIED
Oct 24 12:01:17 fedora20.local systemd[1]: Starting PC/SC Smart Card Daemon...
-- Subject: Unit pcscd.service has begun with start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit pcscd.service has begun starting up.
Oct 24 12:01:17 fedora20.local systemd[1]: Started PC/SC Smart Card Daemon.
-- Subject: Unit pcscd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit pcscd.service has finished starting up.
--
-- The start-up result is done.
Oct 24 12:01:17 fedora20.local pcscd[7034]: 00000000 utils.c:61:GetDaemonPid() Can't open /var/run/pcscd/pcscd.pid: No such file or directory
Oct 24 12:01:20 fedora20.local kernel: usb 2-1.2: USB disconnect, device number 9


What should I try next?
Top
 Profile  
Reply with quote  
halstead
PostPosted: Sat Oct 25, 2014 4:16 am 
Offline

Joined: Mon Nov 25, 2013 11:17 pm
Posts: 4
So I just came back to this after dinner and solved it.

FIrst I edited /etc/udev/rules.d/70-u2f.rules to contain the below without the GROUP argument since that doesn't apply on Fedora.
Code:
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0664", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120"


Next I copied the udev rule for yubikeys over,
Code:
cp  /usr/lib/udev/rules.d/69-yubikey.rules /etc/udev/rules.d/

then added the new product strings to to so line 7 reads,
Code:
ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0010|0110|0111|0113|0114|0115|0116|0120", \


Remove and re-insert the Yubikey NEO.

Now both the openpgp function and the U2F functions are working.

I hope this helps other Fedora users.
Top
 Profile  
Reply with quote  
gbcox
PostPosted: Mon Oct 27, 2014 6:29 pm 
Offline

Joined: Thu Feb 27, 2014 11:38 pm
Posts: 7
halstead wrote:
So I just came back to this after dinner and solved it.

FIrst I edited /etc/udev/rules.d/70-u2f.rules to contain the below without the GROUP argument since that doesn't apply on Fedora.
Code:
KERNEL=="hidraw*", SUBSYSTEM=="hidraw", MODE="0664", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0113|0114|0115|0116|0120"


Next I copied the udev rule for yubikeys over,
Code:
cp  /usr/lib/udev/rules.d/69-yubikey.rules /etc/udev/rules.d/

then added the new product strings to to so line 7 reads,
Code:
ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0010|0110|0111|0113|0114|0115|0116|0120", \


Remove and re-insert the Yubikey NEO.

Now both the openpgp function and the U2F functions are working.

I hope this helps other Fedora users.


Thanks very much... works!

I played around and found that /etc/udev/rules.d/70-u2f.rules doesn't appear to be needed. If I just changed
/usr/lib/udev/rules.d/69-yubikey.rules as you described it appears to work just fine. You also don't need to copy it to /etc/udev/rules.d just
leave it where it is...

No need to make extra files if they aren't needed.
Top
 Profile  
Reply with quote  
invisibleroads
PostPosted: Mon Oct 26, 2015 7:10 pm 
Offline

Joined: Mon Oct 26, 2015 7:00 pm
Posts: 1
The following setup works on Fedora 22.

Quote:
sudo dnf copr enable jjelen/yubikey-neo-manager
sudo dnf copr enable spartacus06/yubikey-utils
sudo dnf list yubi*
sudo dnf -y install yubikey-neo-manager yubioath-desktop yubikey-personalization-gui

# Start yubikey-neo-manager
neoman

# Start yubioath-desktop
sudo service pcscd start
yubioath

# Start yubikey-personalization-gui
yubikey-personalization-gui
Top
 Profile  
Reply with quote  
3strands
PostPosted: Mon Jan 11, 2016 10:20 am 
Offline

Joined: Mon Jan 11, 2016 10:04 am
Posts: 1
I've tried that - Fedora 23 - but all I get is the below:

$ /usr/bin/neoman
Traceback (most recent call last):
File "/usr/bin/neoman", line 3, in <module>
from neoman import main
ImportError: cannot import name main

Any ideas?
Top
 Profile  
Reply with quote  
jmw74
PostPosted: Thu May 05, 2016 12:34 pm 
Offline

Joined: Fri Jul 17, 2015 11:21 am
Posts: 3
3strands wrote:
I've tried that - Fedora 23 - but all I get is the below:

$ /usr/bin/neoman
Traceback (most recent call last):
File "/usr/bin/neoman", line 3, in <module>
from neoman import main
ImportError: cannot import name main

Any ideas?


I had the same issue. Turns out my failed attempt at installing from source was interfering.

sudo rm -rf /usr/lib/python2.7/site-packages/yubikey_neo_manager-1.4.0-py2.7.egg/

Then running neoman again, I get ImportError: cannot import name QtWebKit, which is the same error I get when installing from source. So basically the rpm seems to add no value here.

Edit: I got neoman running now. Again it was due to having installed eggs built from source, so python was picking up those instead of using the rpms. So I just removed /usr/lib/python2.7/site-packages/PySide-1.2.4-py2.7-linux-x86_64.egg/ and then neoman started working.
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 2 of 2
  [ 18 posts ]  Go to page Previous  1, 2

Board index » Yubikey » Yubikey NEO

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 10 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group