this post was submitted on 16 Jan 2024
53 points (100.0% liked)

Linux

1259 readers
71 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
AgreeableLandscape@lemmy.ml
nooter692@lemmy.ml
MarcellusDrum@lemmy.ml
cypherpunks@lemmy.ml
cyclohexane@lemmy.ml
d3Xt3r@lemmy.nz
53
Yubikey on Linux? (lemmy.sdf.org)
submitted 10 months ago* (last edited 6 months ago) by vhstape@lemmy.sdf.org to c/linux@lemmy.ml
13 comments fedilink hide all child comments
 

Hi friends! Has anyone here had success using Yubikeys on Linux? I've been going back and forth with support to no avail, trying to get my Yubikey 5C NFC to play nicely on Ubuntu 22.04 LTS. Any suggestions are appreciated.

I have the following Yubikey-related packages on my system:

libyubikey-udev 1.20.0-3 [Ubuntu/jammy universe]
├── is installed
└── udev rules for unprivileged access to YubiKeys

libyubikey0 1.13-6 [Ubuntu/jammy universe]
├── is installed
└── Yubikey OTP handling library runtime

python3-yubikey-manager 4.0.7-1 [Ubuntu/jammy universe]
├── is installed
└── Python 3 library for configuring a YubiKey — transitional package

yubikey-manager 4.0.7-1 [Ubuntu/jammy universe]
├── is installed
└── Python library and command line tool for configuring a YubiKey

yubikey-manager-qt 1.2.4-1 [Ubuntu/jammy universe]
├── is installed
└── Graphical application for configuring a YubiKey

yubikey-personalization-gui 3.1.24-1build1 [Ubuntu/jammy universe]
├── is installed
└── Graphical personalization tool for YubiKey tokens

libfido2-1 1.10.0-1 [Ubuntu/jammy main]
├── is installed
└── library for generating and verifying FIDO 2.0 objects

python3-fido2 0.9.1-1 [Ubuntu/jammy universe]
├── is installed
└── Python library for implementing FIDO 2.0

pcscd 1.9.5-3ubuntu1 [Ubuntu/jammy universe]
├── is installed
└── Middleware to access a smart card using PC/SC (daemon side)

UPDATE: After working my way down the entire software stack, I contacted the vendor of my USB-C port and requested a replacement. It did the trick...

top 13 comments
sorted by: hot top controversial new old
[–] pineapplelover@lemm.ee 10 points 10 months ago

It works fine straight out of the box. If you need the totp codes, personalization, setting it up download the yubikey apps (probably in your apt repo or check documentation)

[–] floofloof@lemmy.ca 8 points 10 months ago* (last edited 10 months ago) (1 children)

I use my Yubikeys all the time in OpenSUSE Tumbleweed and Linux Mint - a Yubikey 5 NFC and a Yubikey 5C NFC (mostly with Firefox). I have never had any problems with them. Mint is Ubuntu-based so they ought to work in Ubuntu. Sorry I can't advise you on why yours isn't working, but it should definitely be possible to get it working.

[–] WeAreAllOne@lemm.ee 2 points 10 months ago (1 children)

Tumbleweed user here. Thinking of buying a yubikey; is it easy to setup for logins etc or does it involve terminal commands etc. I mean is there a repository app?

[–] floofloof@lemmy.ca 2 points 10 months ago

I'm afraid I can't remember how I did it, it was some time ago on a machine I no longer have. There is some advice here:

https://support.yubico.com/hc/en-us/articles/360016649039-Installing-Yubico-Software-on-Linux

There's an appimage for their manager app there. You might also try using Distrobox to give yourself access to a distro that uses apt, and then add Yubico's PPA and install the software from there. I don't know whether it would work but in principle it should.

[–] 30021190@lemmy.cloud.aboutcher.co.uk 4 points 10 months ago (1 children)

For gnome login, (on Fedora at least) you need to install the packages and edit PAM config to enable the yubikey with login.

[–] vhstape@lemmy.sdf.org 2 points 10 months ago (1 children)

Thanks for your response. I am just looking to use the Yubikey for OTP/passkeys, not system login

[–] 30021190@lemmy.cloud.aboutcher.co.uk 1 points 10 months ago

Should just be plug and play... If your browser is a snap or flatpak then you might need to give it permissions to access your usb devices.

[–] Sarcasmo220@lemmy.ml 4 points 10 months ago (1 children)

usually when I have problems with YubiKey being detected it is because the pcscd service has not been started, or I forgot to enable it so it would start automatically on boot.

You can follow the instructions here on how to do so: https://linuxhandbook.com/systemd-start-service-boot/

[–] vhstape@lemmy.sdf.org 1 points 9 months ago

Unfortunately, pcscd is running... At this point I am thinking it is a hardware issue with my setup

[–] wesker@lemmy.sdf.org 4 points 10 months ago* (last edited 10 months ago)

I'm on Debian, but I think I've only ever used mine in Librewolf. But I can verify it works fine for me in the browser.

[–] dotslashme@infosec.pub 3 points 10 months ago

Did you check their support guides https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U! ?

[–] AutumnSpark1226@lemmy.today 3 points 10 months ago

I have tried a yubikey on ubuntu without any problems. Could you please describe what exactly isn't working

[–] berg@lemm.ee 2 points 10 months ago

I used to use one without any issues, it wasn't the 5 series but it had NFC. The worst part was setting up to use it as an ssh key. Just normal 2FA with it worked straight out of the box (firefox/arch). Is that what you're trying to do?