Problem with yubioath in Opensuse aeon

English Applications
1

Hi all,

I firtst asked this question on the Dutch language subforum, but there I got the suggestion to post it here.

I am new here, I come from the debian universe (debian, ubuntu, mint, etc.) I am charmed by and interested in the concept of Aeon though.

I just installed it on my very old laptop. installation went very smoothly and everything seems to work except Yubioath, the program to use yubikeys.

I installed it via flatpak of course. I also solved the pcscd dependency doing

sudo transactional-update pkg install pcsc-lite

because pcscd.service was not found. After reboot this service does work, albeit itā€™s not persistent, I have tot start it manually after reboot. Probably I need to enable it as a user service?

When I start yubioath through the terminal I get the following:

flatpak run com.yubico.yubioath
18:55:28.487 [desktop.init] INFO: Logging initialized, outputting to stderr
18:55:28.490 [desktop.init] INFO: Window hidden on startup: false
18:55:28.490 [desktop.init] INFO: Starting Helper subprocess: /app/bin/helper/authenticator-helper
18:55:28.491 [main] INFO: Running Yubico Authenticator...
{app_version: 7.1.1, dart: 3.5.2 (stable) (Wed Aug 28 10:01:20 2024 +0000) on "linux_x64", os: linux, os_version: Linux 6.13.5-1-default #1 SMP PREEMPT_DYNAMIC Fri Feb 28 07:06:44 UTC 2025 (ff9b7ff)}
18:55:28.496 [desktop.init] INFO: Helper process started

(authenticator:2): Gtk-CRITICAL **: 18:55:28.612: gtk_widget_get_scale_factor: assertion 'GTK_IS_WIDGET (widget)' failed
18:55:29.070 [helper.ykman.logging] INFO: Logging at level: INFO
18:55:29.070 [helper.helper.device] INFO: Log level set to: INFO
18:55:29.070 [desktop.init] INFO: Helper log level set
18:55:29.121 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:29.130 [helper.ykman.device] WARNING: PC/SC not available. Smart card (CCID) protocols will not function.
18:55:29.388 [helper.ykman.device] SEVERE: Unable to list devices for connection
Traceback (most recent call last):
  File "ykman/device.py", line 291, in list_all_devices
  File "ykman/device.py", line 71, in inner
  File "ykman/device.py", line 89, in list_ccid_devices
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:29.561 [desktop.devices] INFO: USB state change
{"data":{"state":902319125367610597,"pids":{"1031":1}},"actions":["get","scan"],"children":{"12024394":{"pid":1031,"name":"YubiKey 5 NFC","serial":12024394}}}
18:55:29.563 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:29.564 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:29.628 [desktop.devices] INFO: USB state updated, unaccounted for: {}
18:55:29.715 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:29.716 [helper] INFO: Attempting recovery on "state-reset"
18:55:29.857 [helper.ykman.device] SEVERE: Unable to list devices for connection
Traceback (most recent call last):
  File "ykman/device.py", line 291, in list_all_devices
  File "ykman/device.py", line 71, in inner
  File "ykman/device.py", line 89, in list_ccid_devices
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:30.027 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.028 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.091 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.235 [helper.ykman.device] SEVERE: Unable to list devices for connection
Traceback (most recent call last):
  File "ykman/device.py", line 291, in list_all_devices
  File "ykman/device.py", line 71, in inner
  File "ykman/device.py", line 89, in list_ccid_devices
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:30.411 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.413 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.477 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.477 [helper] INFO: Attempting recovery on "state-reset"
18:55:30.757 [helper.ykman.device] SEVERE: Unable to list devices for connection
Traceback (most recent call last):
  File "ykman/device.py", line 291, in list_all_devices
  File "ykman/device.py", line 71, in inner
  File "ykman/device.py", line 89, in list_ccid_devices
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:30.929 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.930 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.994 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.996 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:31.643 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:31.901 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:34.426 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:36.901 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)

I can indeed use my yubikey as a fido key to unlock my bitwarden account, but generating totp codes does not work.

Is this clear? Ideas, tips and hints as well as questions for clarification are welcome.

Screenshot of the gui:

image
image1366Ɨ736 26.9 KB

2

Looking at the Discover page for the yubico flatpak, I see the following note in the description:

NOTE: This (community) flatpak currently works only with distros that use version of pcsc-lite below 2.3.0. For distros that use version 2.3.0 and above use beta version of this flatpak. DONā€™T report this to Yubico.

Sounds like, this could be the issue?

Your options seem to be to either use the beta version of the flatpak or try the software in a distrobox with an older pcsc-lite.

1 Like
3

Iā€™m unable to install due to unfound dependencies

flatpak install flathub-beta com.yubico.yubioath
Zoeken naar overeenkomstenā€¦
fout: De toepassing com.yubico.yubioath/x86_64/beta vereist de runtime org.freedesktop.Platform/x86_64/24.08, welke niet kon worden gevonden
wim@linux:~> flatpak install flathub org.freedesktop.Platform
Zoeken naar overeenkomstenā€¦
Similar refs found for ā€˜org.freedesktop.Platformā€™ in remote ā€˜flathubā€™ (user):

   1) runtime/org.freedesktop.Platform/x86_64/19.08
   2) runtime/org.freedesktop.Platform/x86_64/1.6
   3) runtime/org.freedesktop.Platform/x86_64/20.08
   4) runtime/org.freedesktop.Platform/x86_64/21.08
   5) runtime/org.freedesktop.Platform/x86_64/22.08
   6) runtime/org.freedesktop.Platform/x86_64/23.08
   7) runtime/org.freedesktop.Platform/x86_64/24.08
   8) runtime/org.freedesktop.Platform/x86_64/18.08

Welke wilt u gebruiken (0 om af te breken)? [0-8]: 7
org.freedesktop.Platform/x86_64/24.08 is al geĆÆnstalleerd overgeslagen
wim@linux:~> flatpak install flathub-beta com.yubico.yubioath
Zoeken naar overeenkomstenā€¦
fout: De toepassing com.yubico.yubioath/x86_64/beta vereist de runtime org.freedesktop.Platform/x86_64/24.08, welke niet kon worden gevonden

Never used flatpak before, what to do next?

4

Maybe this is because the remote flathub is only configured for the user and not the system, while flathub-beta was only added as a system remote but not as a user remote.

Iā€™ve run flatpak --user remote-add --if-not-exists flathub-beta https://flathub.org/beta-repo/flathub-beta.flatpakrepo on my machine and could install it via Discover without problems.

Though, it still could not communicate with pcscd - sudo journalctl --unit pcscd --follow showed authorization errors.
A quick search suggested to create a custom polkit rule to allow my user access.
sudo -e /etc/polkit-1/rules.d/03-pcsc-lite-smartcard-access.rules

polkit.addRule(function(action, subject) {
        if ((action.id == "org.debian.pcsc-lite.access_pcsc" || 
                action.id == "org.debian.pcsc-lite.access_card"
        ) && subject.user == "wim") {
            return polkit.Result.YES;
    }
});

(mind the username)

This stopped the errors in pcscd.service, but flatpak run com.yubico.yubioath logs variations of several errors:

21:58:08.457 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
21:58:08.457 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
21:58:08.518 [desktop.devices] INFO: USB state updated, unaccounted for: {}
21:58:08.553 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
21:58:09.543 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type

Some are similar to those in your log, but seems less overall?

I donā€™t know any further at this point, sorry. Iā€™ve checked the non-beta, but then pcscd definitely logs communication errors.
But maybe these steps get you a bit further at leastā€¦

1 Like
5

Hi stendler,

Thanks for the effort. I can duplicate your steps, but the result is also the same: no totp available using yubioath. Thanks anyway. Iā€™ll keep looking.

6

I opened an issue on theflathub/yubioath github page:
https://github.com/flathub/com.yubico.yubioath/issues/113

7

I also stumbled upon this:
https://github.com/LudovicRousseau/PCSC/issues/118#issuecomment-1037280866
But this is above my knowledge/capabilities