Problem with yubioath in Opensuse aeon

English Applications
1

Hi all,

I firtst asked this question on the Dutch language subforum, but there I got the suggestion to post it here.

I am new here, I come from the debian universe (debian, ubuntu, mint, etc.) I am charmed by and interested in the concept of Aeon though.

I just installed it on my very old laptop. installation went very smoothly and everything seems to work except Yubioath, the program to use yubikeys.

I installed it via flatpak of course. I also solved the pcscd dependency doing

sudo transactional-update pkg install pcsc-lite

because pcscd.service was not found. After reboot this service does work, albeit itā€™s not persistent, I have tot start it manually after reboot. Probably I need to enable it as a user service?

When I start yubioath through the terminal I get the following:

flatpak run com.yubico.yubioath
18:55:28.487 [desktop.init] INFO: Logging initialized, outputting to stderr
18:55:28.490 [desktop.init] INFO: Window hidden on startup: false
18:55:28.490 [desktop.init] INFO: Starting Helper subprocess: /app/bin/helper/authenticator-helper
18:55:28.491 [main] INFO: Running Yubico Authenticator...
{app_version: 7.1.1, dart: 3.5.2 (stable) (Wed Aug 28 10:01:20 2024 +0000) on "linux_x64", os: linux, os_version: Linux 6.13.5-1-default #1 SMP PREEMPT_DYNAMIC Fri Feb 28 07:06:44 UTC 2025 (ff9b7ff)}
18:55:28.496 [desktop.init] INFO: Helper process started

(authenticator:2): Gtk-CRITICAL **: 18:55:28.612: gtk_widget_get_scale_factor: assertion 'GTK_IS_WIDGET (widget)' failed
18:55:29.070 [helper.ykman.logging] INFO: Logging at level: INFO
18:55:29.070 [helper.helper.device] INFO: Log level set to: INFO
18:55:29.070 [desktop.init] INFO: Helper log level set
18:55:29.121 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:29.130 [helper.ykman.device] WARNING: PC/SC not available. Smart card (CCID) protocols will not function.
18:55:29.388 [helper.ykman.device] SEVERE: Unable to list devices for connection
Traceback (most recent call last):
  File "ykman/device.py", line 291, in list_all_devices
  File "ykman/device.py", line 71, in inner
  File "ykman/device.py", line 89, in list_ccid_devices
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:29.561 [desktop.devices] INFO: USB state change
{"data":{"state":902319125367610597,"pids":{"1031":1}},"actions":["get","scan"],"children":{"12024394":{"pid":1031,"name":"YubiKey 5 NFC","serial":12024394}}}
18:55:29.563 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:29.564 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:29.628 [desktop.devices] INFO: USB state updated, unaccounted for: {}
18:55:29.715 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:29.716 [helper] INFO: Attempting recovery on "state-reset"
18:55:29.857 [helper.ykman.device] SEVERE: Unable to list devices for connection
Traceback (most recent call last):
  File "ykman/device.py", line 291, in list_all_devices
  File "ykman/device.py", line 71, in inner
  File "ykman/device.py", line 89, in list_ccid_devices
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:30.027 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.028 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.091 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.235 [helper.ykman.device] SEVERE: Unable to list devices for connection
Traceback (most recent call last):
  File "ykman/device.py", line 291, in list_all_devices
  File "ykman/device.py", line 71, in inner
  File "ykman/device.py", line 89, in list_ccid_devices
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:30.411 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.413 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.477 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.477 [helper] INFO: Attempting recovery on "state-reset"
18:55:30.757 [helper.ykman.device] SEVERE: Unable to list devices for connection
Traceback (most recent call last):
  File "ykman/device.py", line 291, in list_all_devices
  File "ykman/device.py", line 71, in inner
  File "ykman/device.py", line 89, in list_ccid_devices
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:30.929 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.930 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.994 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:30.996 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:55:31.643 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:31.901 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:34.426 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)
18:55:36.901 [helper.helper.device] WARNING: Unable to list readers
Traceback (most recent call last):
  File "helper/device.py", line 152, in list_children
  File "ykman/pcsc/__init__.py", line 180, in list_devices
  File "ykman/pcsc/__init__.py", line 168, in list_readers
  File "smartcard/System.py", line 41, in readers
  File "smartcard/reader/ReaderFactory.py", line 58, in readers
  File "smartcard/pcsc/PCSCReader.py", line 111, in readers
  File "smartcard/pcsc/PCSCContext.py", line 56, in __init__
  File "smartcard/pcsc/PCSCContext.py", line 70, in renewContext
  File "smartcard/pcsc/PCSCContext.py", line 40, in __init__
smartcard.pcsc.PCSCExceptions.EstablishContextException: Failed to establish context: Service was stopped. (0x8010001E)

I can indeed use my yubikey as a fido key to unlock my bitwarden account, but generating totp codes does not work.

Is this clear? Ideas, tips and hints as well as questions for clarification are welcome.

Screenshot of the gui:

image
image1366Ɨ736 26.9 KB

2

Looking at the Discover page for the yubico flatpak, I see the following note in the description:

NOTE: This (community) flatpak currently works only with distros that use version of pcsc-lite below 2.3.0. For distros that use version 2.3.0 and above use beta version of this flatpak. DONā€™T report this to Yubico.

Sounds like, this could be the issue?

Your options seem to be to either use the beta version of the flatpak or try the software in a distrobox with an older pcsc-lite.

1 Like
3

Iā€™m unable to install due to unfound dependencies

flatpak install flathub-beta com.yubico.yubioath
Zoeken naar overeenkomstenā€¦
fout: De toepassing com.yubico.yubioath/x86_64/beta vereist de runtime org.freedesktop.Platform/x86_64/24.08, welke niet kon worden gevonden
wim@linux:~> flatpak install flathub org.freedesktop.Platform
Zoeken naar overeenkomstenā€¦
Similar refs found for ā€˜org.freedesktop.Platformā€™ in remote ā€˜flathubā€™ (user):

   1) runtime/org.freedesktop.Platform/x86_64/19.08
   2) runtime/org.freedesktop.Platform/x86_64/1.6
   3) runtime/org.freedesktop.Platform/x86_64/20.08
   4) runtime/org.freedesktop.Platform/x86_64/21.08
   5) runtime/org.freedesktop.Platform/x86_64/22.08
   6) runtime/org.freedesktop.Platform/x86_64/23.08
   7) runtime/org.freedesktop.Platform/x86_64/24.08
   8) runtime/org.freedesktop.Platform/x86_64/18.08

Welke wilt u gebruiken (0 om af te breken)? [0-8]: 7
org.freedesktop.Platform/x86_64/24.08 is al geĆÆnstalleerd overgeslagen
wim@linux:~> flatpak install flathub-beta com.yubico.yubioath
Zoeken naar overeenkomstenā€¦
fout: De toepassing com.yubico.yubioath/x86_64/beta vereist de runtime org.freedesktop.Platform/x86_64/24.08, welke niet kon worden gevonden

Never used flatpak before, what to do next?

4

Maybe this is because the remote flathub is only configured for the user and not the system, while flathub-beta was only added as a system remote but not as a user remote.

Iā€™ve run flatpak --user remote-add --if-not-exists flathub-beta https://flathub.org/beta-repo/flathub-beta.flatpakrepo on my machine and could install it via Discover without problems.

Though, it still could not communicate with pcscd - sudo journalctl --unit pcscd --follow showed authorization errors.
A quick search suggested to create a custom polkit rule to allow my user access.
sudo -e /etc/polkit-1/rules.d/03-pcsc-lite-smartcard-access.rules

polkit.addRule(function(action, subject) {
        if ((action.id == "org.debian.pcsc-lite.access_pcsc" || 
                action.id == "org.debian.pcsc-lite.access_card"
        ) && subject.user == "wim") {
            return polkit.Result.YES;
    }
});

(mind the username)

This stopped the errors in pcscd.service, but flatpak run com.yubico.yubioath logs variations of several errors:

21:58:08.457 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
21:58:08.457 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.otp.OtpConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 354, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
21:58:08.518 [desktop.devices] INFO: USB state updated, unaccounted for: {}
21:58:08.553 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
21:58:09.543 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 365, in ccid
  File "helper/device.py", line 335, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type

Some are similar to those in your log, but seems less overall?

I donā€™t know any further at this point, sorry. Iā€™ve checked the non-beta, but then pcscd definitely logs communication errors.
But maybe these steps get you a bit further at leastā€¦

1 Like
5

Hi stendler,

Thanks for the effort. I can duplicate your steps, but the result is also the same: no totp available using yubioath. Thanks anyway. Iā€™ll keep looking.

6

I opened an issue on theflathub/yubioath github page:
https://github.com/flathub/com.yubico.yubioath/issues/113

7

I also stumbled upon this:
https://github.com/LudovicRousseau/PCSC/issues/118#issuecomment-1037280866
But this is above my knowledge/capabilities

8

Iā€™ve been digging some more. This https://blog.apdu.fr/posts/2022/02/fedora-flatpak-and-pcsc-lite/ is fedora related, but could this issue relate to Aeon somehow?

9

Also found this https://blog.apdu.fr/posts/2014/03/level-1-smart-card-support-on-gnulinux/

wim@linux:~> systemctl status pcscd
ā— pcscd.service - PC/SC Smart Card Daemon
Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
Active: active (running) since Fri 2025-03-28 10:37:08 CET; 5min ago
Invocation: 0db212c515084ac9a20073d234b6f454
TriggeredBy: ā— pcscd.socket
Docs: man:pcscd(8)
Main PID: 3822 (pcscd)
Tasks: 6 (limit: 18979)
CPU: 155ms
CGroup: /system.slice/pcscd.service
ā””ā”€3822 /usr/sbin/pcscd --foreground
wim@linux:~> pcsc_scan
PC/SC device scanner
V 1.7.3 (c) 2001-2024, Ludovic Rousseau ludovic.rousseau@free.fr
Using reader plugā€™n play mechanism
Scanning present readersā€¦
Waiting for the first readerā€¦

But the yubikey is plugged in!

10

@WimDeWinter ,
Please use the Preformatted Text" button </> instead of the Blockquote " button for your copied/pasted terminal text.

11

Also found this https://blog.apdu.fr/posts/2014/03/level-1-smart-card-support-on-gnulinux/

wim@linux:~> systemctl status pcscd
ā— pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
     Active: active (running) since Fri 2025-03-28 10:37:08 CET; 5min ago
 Invocation: 0db212c515084ac9a20073d234b6f454
TriggeredBy: ā— pcscd.socket
       Docs: man:pcscd(8)
   Main PID: 3822 (pcscd)
      Tasks: 6 (limit: 18979)
        CPU: 155ms
     CGroup: /system.slice/pcscd.service
             ā””ā”€3822 /usr/sbin/pcscd --foreground
wim@linux:~> pcsc_scan
PC/SC device scanner
V 1.7.3 (c) 2001-2024, Ludovic Rousseau <ludovic.rousseau@free.fr>
Using reader plug'n play mechanism
Scanning present readers...
Waiting for the first reader...

But the yubikey is plugged in!

12

Likely your yubikey is plugged in via USB. If so, check using lsusb if it is listed.

13 
wim@linux:~> lsusb
bash: lsusb: opdracht niet gevonden

but it IS plugged in!

Schermafdruk van 2025-03-29 15-28-54
Schermafdruk van 2025-03-29 15-28-541361Ɨ722 72.3 KB

14

lsusb is provided by usbutils

1 Like
15

I see the key has also NFC, is it plugged in in an USB port?

16

yes, plugged into a usb port

17 
wim@linux:~> lsusb
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 001 Device 003: ID 1050:0407 Yubico.com Yubikey 4/5 OTP+U2F+CCID
Bus 001 Device 004: ID 04f2:b257 Chicony Electronics Co., Ltd Lenovo Integrated Camera
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
18

I canā€™t speak to uses of the yubiauth app on Aeon, as I have never done that. IIRC, I only successfully ran the app.appimage on my tumbleweed once.
But I have zero issues using my yubi key with flatpak Firefox.

19

Okay the device is visible on the USB bus.

Not sure that is possible in Aeon out-of-the-box but I would 2. (creating /etc/udev/rules.d/70-u2f.rules) from:

1 Like
20

/etc is always writable on Aeon, you can put whatever configs you might feel you need in there.

1 Like