Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: Is there any hope of getting a Yubikey to work?

  1. #1

    Default Is there any hope of getting a Yubikey to work?

    Over the years I have tried to get a Yubikey2 to function in linux, or any program on linux. Failure so far. Each time it's: install this driver, configure these driver parms, add this PAM module, use this app. Nothing.

    From lsusb: "Yubico.com Yubikey Touch U2F Security Key"
    That is the most I have ever achieved.

    Has anyone had success with using a Yubikey? If so, how did you do it?

  2. #2
    Join Date
    Jun 2008
    Location
    Groningen, Netherlands
    Posts
    20,004
    Blog Entries
    14

    Default Re: Is there any hope of getting a Yubikey to work?

    There's a workshop at oSC19 .......
    ° Appreciate my reply? Click the star and let me know why.

    ° Perfection is not gonna happen. No way.

    https://en.opensuse.org/openSUSE:Board#Members
    http://en.opensuse.org/User:Knurpht
    http://nl.opensuse.org/Gebruiker:Knurpht

  3. #3
    Join Date
    Jun 2008
    Location
    Podunk
    Posts
    27,130
    Blog Entries
    15

    Default Re: Is there any hope of getting a Yubikey to work?

    Quote Originally Posted by jimoe666 View Post
    Over the years I have tried to get a Yubikey2 to function in linux, or any program on linux. Failure so far. Each time it's: install this driver, configure these driver parms, add this PAM module, use this app. Nothing.

    From lsusb: "Yubico.com Yubikey Touch U2F Security Key"
    That is the most I have ever achieved.

    Has anyone had success with using a Yubikey? If so, how did you do it?
    Hi
    A user reports success here: http://forums.opensuse.org/showthread.php?t=534862
    Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
    SUSE SLE, openSUSE Leap/Tumbleweed (x86_64) | GNOME DE
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below... Thanks!

  4. #4

    Default Re: Is there any hope of getting a Yubikey to work?

    Quote Originally Posted by malcolmlewis View Post
    Sadly, another method that fails.

    U2F on linux must be really ******ing hard.

    I created the udev file noted above, reloaded udev rules. I re-plugged the device and got this:
    Code:
    $ dmesg | tail
    [210164.115445] usb 3-2.4.3: new full-speed USB device number 22 using ehci-pci
    [210164.226135] usb 3-2.4.3: New USB device found, idVendor=1050, idProduct=0120
    [210164.226154] usb 3-2.4.3: New USB device strings: Mfr=1, Product=2, SerialNumber=0
    [210164.226165] usb 3-2.4.3: Product: Security Key by Yubico
    [210164.226174] usb 3-2.4.3: Manufacturer: Yubico
    [210164.229946] hid-generic 0003:1050:0120.000B: hiddev98,hidraw7: USB HID v1.10 Device [Yubico Security Key by Yubico] on usb-0000:00:12.2-2.4.3/input0
    which is the same info as lsusb provides.

    Code:
    $ ykman list
    FIDO U2F Security Key by Yubico [U2F] Serial: Not available
    $  ykman mode
    Current connection mode is: U2F
    Supported connections are: U2F
    which may suggest, possibly, that the device is there, but is useless.

  5. #5
    Join Date
    Feb 2010
    Location
    Germany
    Posts
    2,575

    Default Re: Is there any hope of getting a Yubikey to work?

    There's a cryptography Guru by the name of Bruce Schneier – he's currently a Special Advisor to IBM Security, a fellow and lecturer at Harvard's Kennedy School, and a board member of EFF.

    Two Blog entries which mention YubuKey:

  6. #6
    Join Date
    Apr 2016
    Location
    Texas
    Posts
    25

    Default Re: Is there any hope of getting a Yubikey to work?

    Yubikey 4 working perfectly in Firefox on Leap 15.1, not sure that's what you wanted. Had to toggle this key in the FF config: security.webauth.u2f - it needed to be set to "true".

    I also had to install yubikey-manager and u2f-host. Worked fine to login to my Google photos account after that. As for logging into the OS itself, I can't speak to that.
    “The meaning of life is to find your gift. The purpose of life is to give it away.”

  7. #7
    Join Date
    Jun 2008
    Location
    San Diego, Ca, USA
    Posts
    11,413
    Blog Entries
    2

    Default Re: Is there any hope of getting a Yubikey to work?

    Looks like there is a big difference between Yubikey 2 and 4.
    And, is important what you're trying to access.

    Have you tried Yubikey's instructions?

    https://www.yubico.com/setup/

    TSU
    Beginner Wiki Quickstart - https://en.opensuse.org/User:Tsu2/Quickstart_Wiki
    Solved a problem recently? Create a wiki page for future personal reference!
    Learn something new?
    Attended a computing event?
    Post and Share!

  8. #8

    Default Re: Is there any hope of getting a Yubikey to work?

    Quote Originally Posted by tsu2 View Post
    Looks like there is a big difference between Yubikey 2 and 4.
    I suppose. Apparently Yubikey 2 is never going to happen on opensuse.

    And, is important what you're trying to access.
    I was hoping for 2-factor authentication with Lastpass.

    Have you tried Yubikey's instructions?
    Yes, of course. The process dies at step 7.

  9. #9

    Default Re: Is there any hope of getting a Yubikey to work?

    Quote Originally Posted by sevendogs View Post
    Yubikey 4 working perfectly in Firefox on Leap 15.1, not sure that's what you wanted. Had to toggle this key in the FF config: security.webauth.u2f - it needed to be set to "true".

    I also had to install yubikey-manager and u2f-host.
    All of that is in place here. Except, I guess, Yubikey 4? I have the blue Yubikey with a key icon in the center.
    Nowhere on Yubikey's site can I find information on which key I have, 2 or 4.

  10. #10

    Default Re: Is there any hope of getting a Yubikey to work?

    I suppose this should tell me something...
    Code:
    $ lsusb -d 1050:0120 -v
    Bus 003 Device 021: ID 1050:0120 Yubico.com Yubikey Touch U2F Security Key
    Couldn't open device, some information will be missing
    "Couldn't open device." Hmm. Implies there is almost no system support.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •