Problem with yubioath in Opensuse aeon

English Applications
21

Alas, no luck:

wim@linux:~> systemctl status pcscd
● pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
     Active: active (running) since Sat 2025-03-29 18:22:56 CET; 45s ago
 Invocation: bc492ba693644e1dac29310dcba27412
TriggeredBy: ● pcscd.socket
       Docs: man:pcscd(8)
   Main PID: 3151 (pcscd)
      Tasks: 6 (limit: 18979)
        CPU: 78ms
     CGroup: /system.slice/pcscd.service
             └─3151 /usr/sbin/pcscd --foreground
wim@linux:~> flatpak run com.yubico.yubioath

(authenticator:2): Gdk-CRITICAL **: 18:24:35.586: gdk_wayland_display_get_monitor_at_window: assertion 'GDK_IS_WAYLAND_WINDOW (window)' failed

(authenticator:2): Gdk-CRITICAL **: 18:24:35.586: gdk_window_get_origin: assertion 'GDK_IS_WINDOW (window)' failed

** (authenticator:2): CRITICAL **: 18:24:35.586: FlutterEngineDisplayId fl_display_monitor_get_display_id(FlDisplayMonitor *, GdkMonitor *): assertion 'FL_IS_DISPLAY_MONITOR(self)' failed
Gdk-Message: 18:24:35.649: Unable to load  from the cursor theme
18:24:35.674 [desktop.init] INFO: Logging initialized, outputting to stderr
18:24:35.677 [desktop.init] INFO: Window hidden on startup: false
18:24:35.677 [desktop.init] INFO: Starting Helper subprocess: /app/bin/helper/authenticator-helper
18:24:35.678 [main] INFO: Running Yubico Authenticator...
{app_version: 7.2.0, dart: 3.7.2 (stable) (Tue Mar 11 04:27:50 2025 -0700) on "linux_x64", os: linux, os_version: Linux 6.13.5-1-default #1 SMP PREEMPT_DYNAMIC Fri Feb 28 07:06:44 UTC 2025 (ff9b7ff)}
18:24:35.683 [desktop.init] INFO: Helper process started

(authenticator:2): Gtk-CRITICAL **: 18:24:35.859: gtk_widget_get_scale_factor: assertion 'GTK_IS_WIDGET (widget)' failed
18:24:36.292 [helper.ykman.logging] INFO: Logging at level: INFO
18:24:36.292 [helper.helper.device] INFO: Log level set to: INFO
18:24:36.293 [desktop.init] INFO: Helper log level set
18:24:36.722 [desktop.devices] INFO: USB state change
{"data":{"state":7516690338208129056,"pids":{"1031":1}},"actions":["get","scan"],"children":{"12024394":{"pid":1031,"name":"YubiKey 5 NFC","serial":12024394}}}
18:24:36.724 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 353, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:36.775 [desktop.devices] INFO: USB state updated, unaccounted for: {}
18:24:36.871 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 364, in ccid
  File "helper/device.py", line 334, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:36.871 [helper] INFO: Attempting recovery on "state-reset"
18:24:37.147 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 353, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:37.198 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 364, in ccid
  File "helper/device.py", line 334, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:37.199 [helper] INFO: Attempting recovery on "state-reset"
18:24:37.473 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 353, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:37.525 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 364, in ccid
  File "helper/device.py", line 334, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:37.800 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 353, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:37.848 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 364, in ccid
  File "helper/device.py", line 334, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:37.851 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 364, in ccid
  File "helper/device.py", line 334, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:37.853 [helper.helper.device] WARNING: Error opening connection
Traceback (most recent call last):
  File "helper/device.py", line 364, in ccid
  File "helper/device.py", line 334, in _create_connection
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
18:24:50.154 [helper.helper.device] WARNING: Unable to connect via <class 'yubikit.core.smartcard.SmartCardConnection'>
Traceback (most recent call last):
  File "helper/device.py", line 353, in _refresh_data
  File "ykman/device.py", line 257, in open_connection
ValueError: Unsupported Connection type
embedder.cc (2519): 'FlutterEngineRemoveView' returned 'kInvalidArguments'. Remove view info was invalid. The implicit view cannot be removed.

** (authenticator:2): WARNING **: 18:24:51.730: Attempted to set message handler on an FlBinaryMessenger without an engine

** (authenticator:2): WARNING **: 18:24:51.730: Attempted to set message handler on an FlBinaryMessenger without an engine
22

By the way:

wim@linux:~> udevadm --version
257
23

Did you reboot the machine or plug out,in yubikey or trigger udev otherwise the after updating udev?

Probably good to check what is discussed under:

If things still not work with that, please report here what you tried and the results you got.

1 Like
24

Yes, I rebooted after updating udev. So,

systemctl status pcscd
○ pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
     Active: inactive (dead)
TriggeredBy: ● pcscd.socket
       Docs: man:pcscd(8)
wim@linux:~> systemctl start pcscd
wim@linux:~> systemctl status pcscd
● pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
     Active: active (running) since Sat 2025-03-29 19:40:16 CET; 2s ago
 Invocation: 07ca994abcf44852b437043fb9446ff2
TriggeredBy: ● pcscd.socket
       Docs: man:pcscd(8)
   Main PID: 4117 (pcscd)
      Tasks: 5 (limit: 18978)
        CPU: 109ms
     CGroup: /system.slice/pcscd.service
             └─4117 /usr/sbin/pcscd --foreground
wim@linux:~> ykman --diagnose
ykman:            5.6.1
Python:           3.13.2 (main, Feb 05 2025, 09:57:44) [GCC]
Platform:         linux
Arch:             x86_64
System date:      2025-03-29
Running as admin: False
Detected PC/SC readers:
  Yubico YubiKey OTP+FIDO+CCID 00 00: Success

and further down in the same query:

Detected YubiKeys over HID OTP:
  OtpYubiKeyDevice(pid=0407, fingerprint='/dev/hidraw0'):


wim@linux:~> sudo lsusb -v -d 1050:0407

Bus 001 Device 003: ID 1050:0407 Yubico.com Yubikey 4/5 OTP+U2F+CCID
Negotiated speed: Full Speed (12Mbps)
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0 [unknown]
  bDeviceSubClass         0 [unknown]
  bDeviceProtocol         0 
  bMaxPacketSize0        64
  idVendor           0x1050 Yubico.com
  idProduct          0x0407 Yubikey 4/5 OTP+U2F+CCID
  bcdDevice            5.24
  iManufacturer           1 Yubico
  iProduct                2 YubiKey OTP+FIDO+CCID
  iSerial                 0 
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength       0x0096
    bNumInterfaces          3
    bConfigurationValue     1
    iConfiguration          0 
    bmAttributes         0x80
      (Bus Powered)
    MaxPower               30mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           1
      bInterfaceClass         3 Human Interface Device
      bInterfaceSubClass      1 Boot Interface Subclass
      bInterfaceProtocol      1 Keyboard
      iInterface              0 
        HID Device Descriptor:
          bLength                 9
          bDescriptorType        33
          bcdHID               1.10
          bCountryCode            0 Not supported
          bNumDescriptors         1
          bDescriptorType        34 (null)
          wDescriptorLength      71
          Report Descriptors: 
            ** UNAVAILABLE **
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0008  1x 8 bytes
        bInterval              10
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         3 Human Interface Device
      bInterfaceSubClass      0 [unknown]
      bInterfaceProtocol      0 
      iInterface              0 
        HID Device Descriptor:
          bLength                 9
          bDescriptorType        33
          bcdHID               1.10
          bCountryCode            0 Not supported
          bNumDescriptors         1
          bDescriptorType        34 (null)
          wDescriptorLength      34
          Report Descriptors: 
            ** UNAVAILABLE **
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x04  EP 4 OUT
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               2
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x84  EP 4 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               2
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        2
      bAlternateSetting       0
      bNumEndpoints           3
      bInterfaceClass        11 Chip/SmartCard
      bInterfaceSubClass      0 [unknown]
      bInterfaceProtocol      0 
      iInterface              0 
      ChipCard Interface Descriptor:
        bLength                54
        bDescriptorType        33
        bcdCCID              1.00
        nMaxSlotIndex           0
        bVoltageSupport         7  5.0V 3.0V 1.8V 
        dwProtocols             2  T=1
        dwDefaultClock       4000
        dwMaxiumumClock      4000
        bNumClockSupported      0
        dwDataRate         307200 bps
        dwMaxDataRate      307200 bps
        bNumDataRatesSupp.      0
        dwMaxIFSD            3062
        dwSyncProtocols  00000000 
        dwMechanical     00000000 
        dwFeatures       000400FE
          Auto configuration based on ATR
          Auto activation on insert
          Auto voltage selection
          Auto clock change
          Auto baud rate change
        WARNING: conflicting negotiation features
          Short and extended APDU level exchange
        dwMaxCCIDMsgLen      3072
        bClassGetResponse    echo
        bClassEnvelope       echo
        wlcdLayout           none
        bPINSupport             0 
        bMaxCCIDBusySlots       1
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x02  EP 2 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x82  EP 2 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0040  1x 64 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x83  EP 3 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0008  1x 8 bytes
        bInterval              32
Device Status:     0x0000
  (Bus Powered)


wim@linux:~> ls -l /dev/hidraw0
crw-rw----+ 1 root root 244, 0 29 mrt 19:32 /dev/hidraw0

wim@linux:~> getfacl /dev/hidraw0
getfacl: Removing leading '/' from absolute path names
# file: dev/hidraw0
# owner: root
# group: root
user::rw-
user:wim:rw-
group::rw-
mask::rw-
other::---

wim@linux:~> cd /etc/udev/rules.d
wim@linux:/etc/udev/rules.d> ls
70-u2f.rules
wim@linux:/etc/udev/rules.d> sudo touch 99-yubikeys.rules
[sudo] wachtwoord voor wim: 
wim@linux:/etc/udev/rules.d> ls
70-u2f.rules  99-yubikeys.rules
wim@linux:/etc/udev/rules.d> sudo vi 99-yubikeys.rules
wim@linux:/etc/udev/rules.d> 

systemctl status pcscd
● pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
     Active: active (running) since Sat 2025-03-29 20:07:24 CET; 2s ago
 Invocation: 75406c9728ba4d4f855b9e20a88359f3
TriggeredBy: ● pcscd.socket
       Docs: man:pcscd(8)
   Main PID: 3761 (pcscd)
      Tasks: 5 (limit: 18978)
        CPU: 116ms
     CGroup: /system.slice/pcscd.service
             └─3761 /usr/sbin/pcscd --foreground
wim@linux:/etc/udev/rules.d> flatpak run com.yubico.yubioath

Plug in yubikey and everything seems to work!

for reference: My 99-yubikeys.rules looks like this:

SUBSYSTEMS=="usb", ATTRS{idVendor}=="1050", ATTRS{idProduct}=="0116", TAG+="uaccess"

Rebooting and everything seems persistent.

1 Like
25

pcscd.service will only start, when a programm need them.

systemctl status pcscd.service 
○ pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
     Active: inactive (dead)
TriggeredBy: ● pcscd.socket
       Docs: man:pcscd(8)


pcsc_scan 
PC/SC device scanner
V 1.7.3 (c) 2001-2024, Ludovic Rousseau <ludovic.rousseau@free.fr>
Using reader plug'n play mechanism
Scanning present readers...
0: REINER SCT cyberJack RFID komfort (2070958481) 00 00
 
Sat Mar 29 20:20:10 2025
 Reader 0: REINER SCT cyberJack RFID komfort (2070958481) 00 00
  Event number: 0
  Card state: Card inserted, 
  ATR: 3B FF 96 00 FF 81 31 FE 45 65 63 0D 0D 75 07 64 00 0D 00 06 95 28 07 40 7C

ATR: 3B FF 96 00 FF 81 31 FE 45 65 63 0D 0D 75 07 64 00 0D 00 06 95 28 07 40 7C
+ TS = 3B --> Direct Convention
+ T0 = FF, Y(1): 1111, K: 15 (historical bytes)
  TA(1) = 96 --> Fi=512, Di=32, 16 cycles/ETU
    250000 bits/s at 4 MHz, fMax for Fi = 5 MHz => 312500 bits/s
  TB(1) = 00 --> VPP is not electrically connected
  TC(1) = FF --> Extra guard time: 255 (special value)
  TD(1) = 81 --> Y(i+1) = 1000, Protocol T = 1 
-----
  TD(2) = 31 --> Y(i+1) = 0011, Protocol T = 1 
-----
  TA(3) = FE --> IFSC: 254
  TB(3) = 45 --> Block Waiting Integer: 4 - Character Waiting Integer: 5
+ Historical bytes: 65 63 0D 0D 75 07 64 00 0D 00 06 95 28 07 40
  Category indicator byte: 65 (proprietary format)
+ TCK = 7C (correct checksum)

Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):
3B FF 96 00 FF 81 31 FE 45 65 63 0D 0D 75 07 64 00 0D 00 06 95 28 07 40 7C
3B FF .. 00 FF 81 31 .. 45 65 63 .. .. .. .. .. .. .. .. .. .. .. .. .. ..
        Debit card (Germany): ec-cash, GeldKarte(EUR), Maestro, Cirrus, 

systemctl status pcscd.service 
● pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; preset: disabled)
     Active: active (running) since Sat 2025-03-29 20:20:09 CET; 51s ago
TriggeredBy: ● pcscd.socket
       Docs: man:pcscd(8)
   Main PID: 7721 (pcscd)
      Tasks: 9 (limit: 4915)
        CPU: 105ms
     CGroup: /system.slice/pcscd.service
             └─7721 /usr/sbin/pcscd --foreground

Mär 29 20:20:09 linux64 systemd[1]: Started PC/SC Smart Card Daemon.
Mär 29 20:20:09 linux64 pcscd[7721]: CYBERJACK: Started
1 Like
26

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.