Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Many errors on Kubuntu after cli installations last step #77

Open
dasdirksche opened this issue Apr 1, 2024 · 4 comments
Open

Many errors on Kubuntu after cli installations last step #77

dasdirksche opened this issue Apr 1, 2024 · 4 comments

Comments

@dasdirksche
Copy link

Kubuntu 22.04
Kernelversion: 6.5.0-26-generic (64-bit)

I did install the onlykey-cli exactly like explained on docs. After running the last command:
udevadm control --reload-rules && udevadm trigger
I got thousands of errors
When I try for example:
onlykey-cli credential ls
and skip the PIN (cause I didn't set one) I got:
Traceback (most recent call last): File "/home/dirk/.local/bin/onlykey-cli", line 8, in <module> sys.exit(main()) File "/home/dirk/.local/lib/python3.10/site-packages/onlykey/cli.py", line 1196, in main cli() File "/home/dirk/.local/lib/python3.10/site-packages/onlykey/cli.py", line 520, in cli solo.cli.key() File "/usr/lib/python3/dist-packages/click/core.py", line 1128, in __call__ return self.main(*args, **kwargs) File "/usr/lib/python3/dist-packages/click/core.py", line 1053, in main rv = self.invoke(ctx) File "/usr/lib/python3/dist-packages/click/core.py", line 1659, in invoke return _process_result(sub_ctx.command.invoke(sub_ctx)) File "/usr/lib/python3/dist-packages/click/core.py", line 1659, in invoke return _process_result(sub_ctx.command.invoke(sub_ctx)) File "/usr/lib/python3/dist-packages/click/core.py", line 1395, in invoke return ctx.invoke(self.callback, **ctx.params) File "/usr/lib/python3/dist-packages/click/core.py", line 754, in invoke return __callback(*args, **kwargs) File "/home/dirk/.local/lib/python3.10/site-packages/solo/cli/key.py", line 553, in cred_ls cm = client.cred_mgmt(pin) File "/home/dirk/.local/lib/python3.10/site-packages/solo/devices/base.py", line 116, in cred_mgmt token = client.client_pin.get_pin_token(pin) File "/home/dirk/.local/lib/python3.10/site-packages/fido2/ctap2/pin.py", line 260, in get_pin_token resp = self.ctap.client_pin( File "/home/dirk/.local/lib/python3.10/site-packages/fido2/ctap2/base.py", line 728, in client_pin return self.send_cbor( File "/home/dirk/.local/lib/python3.10/site-packages/fido2/ctap2/base.py", line 675, in send_cbor raise CtapError(status) fido2.ctap.CtapError: CTAP error: 0x35 - PIN_NOT_SET
When I install the onlykey-app with snap the app starts but will not recognice the key.(Please connect your key). When I open the app in terminal with the prompt 'onlykey-app' I got:
Gtk-Message: Failed to load module "colorreload-gtk-module" Gtk-Message: Failed to load module "window-decorations-gtk-module" libGL error: pci id for fd 117: 8086:8a52, driver (null) libGL error: No driver found libGL error: failed to load driver: (null) libGL error: pci id for fd 117: 8086:8a52, driver (null) libGL error: unable to load driver: iris_dri.so libGL error: driver pointer missing libGL error: failed to load driver: iris [4881:4881:0401/195120.984600:ERROR:component_loader.cc(162)] Failed to parse extension manifest. [4881:5007:0401/195120.986384:ERROR:object_proxy.cc(621)] Failed to call method: org.kde.KWallet.isEnabled: object_path= /modules/kwalletd5: org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.65" (uid=1000 pid=4881 comm="/snap/onlykey-app/7/opt/OnlyKey/nw " label="snap.onlykey-app.onlykey-app (enforce)") interface="org.kde.KWallet" member="isEnabled" error name="(unset)" requested_reply="0" destination="org.kde.kwalletd5" (uid=1000 pid=1054 comm="/usr/bin/kwalletd5 --pam-login 7 8 " label="unconfined") [4881:5007:0401/195120.986400:ERROR:kwallet_dbus.cc(100)] Error contacting kwalletd5 (isEnabled) [4881:5007:0401/195120.986626:ERROR:object_proxy.cc(621)] Failed to call method: org.kde.KLauncher.start_service_by_desktop_name: object_path= /KLauncher: org.freedesktop.DBus.Error.ServiceUnknown: The name org.kde.klauncher was not provided by any .service files [4881:5007:0401/195120.986635:ERROR:kwallet_dbus.cc(72)] Error contacting klauncher to start kwalletd5 [5004:5004:0401/195121.012056:ERROR:sandbox_linux.cc(366)] InitializeSandbox() called with multiple threads in process gpu-process. [5016:5041:0401/195121.103504:ERROR:command_buffer_proxy_impl.cc(124)] ContextResult::kTransientFailure: Failed to send GpuChannelMsg_CreateCommandBuffer. [4881:4993:0401/195121.459676:ERROR:udev_watcher.cc(63)] Failed to begin udev enumeration. shm_open() failed: Permission denied [4881:4994:0401/195129.030975:ERROR:udev_watcher.cc(63)] Failed to begin udev enumeration.
Nothing works on Linux. It is frustrating

@dasdirksche
Copy link
Author

Sorry. I try to write it more clearly arranged.
using the prompt: onlykey-cli credential ls
The output is:

Traceback (most recent call last):
  File "/home/dirk/.local/bin/onlykey-cli", line 8, in <module>
    sys.exit(main())
  File "/home/dirk/.local/lib/python3.10/site-packages/onlykey/cli.py", line 1196, in main
    cli()
  File "/home/dirk/.local/lib/python3.10/site-packages/onlykey/cli.py", line 520, in cli
    solo.cli.key()
  File "/usr/lib/python3/dist-packages/click/core.py", line 1128, in __call__
    return self.main(*args, **kwargs)
  File "/usr/lib/python3/dist-packages/click/core.py", line 1053, in main
    rv = self.invoke(ctx)
  File "/usr/lib/python3/dist-packages/click/core.py", line 1659, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "/usr/lib/python3/dist-packages/click/core.py", line 1659, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File "/usr/lib/python3/dist-packages/click/core.py", line 1395, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "/usr/lib/python3/dist-packages/click/core.py", line 754, in invoke
    return __callback(*args, **kwargs)
  File "/home/dirk/.local/lib/python3.10/site-packages/solo/cli/key.py", line 553, in cred_ls
    cm = client.cred_mgmt(pin)
  File "/home/dirk/.local/lib/python3.10/site-packages/solo/devices/base.py", line 116, in cred_mgmt
    token = client.client_pin.get_pin_token(pin)
  File "/home/dirk/.local/lib/python3.10/site-packages/fido2/ctap2/pin.py", line 260, in get_pin_token
    resp = self.ctap.client_pin(
  File "/home/dirk/.local/lib/python3.10/site-packages/fido2/ctap2/base.py", line 728, in client_pin
    return self.send_cbor(
  File "/home/dirk/.local/lib/python3.10/site-packages/fido2/ctap2/base.py", line 675, in send_cbor
    raise CtapError(status)
fido2.ctap.CtapError: CTAP error: 0x35 - PIN_NOT_SET

Do I have to set a pin?

@dasdirksche
Copy link
Author

Sorry. Me again.
if I register a passkey on Linux in Firefox there is no prompt to set a pin. If I register a passkey on windows, there is a prompt to setup a pin. After adding the pin in Windows the onlykey-cli credential ls works now.
But why won't Firefox under Linux ask for a pin?

@onlykey
Copy link
Contributor

onlykey commented Apr 1, 2024

It's because I think Firefox is using an old version of FIDO-U2F and the other browsers use FIDO2. Yes, a PIN must be set for resident credentials (FIDO2) that are stored on OnlyKey.

@dasdirksche
Copy link
Author

Same Firefox Version on both, Linux and Windows.: 124.0.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants