[SOLVED] KeepassXC requires root when using Yubikey

Forum Forums Orphaned Posts antiX-17 “Heather Heyer, Helen Keller” [SOLVED] KeepassXC requires root when using Yubikey

  • This topic has 5 replies, 3 voices, and was last updated Apr 3-10:27 am by Anonymous.
Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • #19980
    Anonymous

      I’m running the latest version of AntiX and for some reason, when I want to use KeepassXC with my Yubikey (Challenge and Response function), the only way I can use it is by opening KeepassXC as root. It runs as expected as a normal user in MX Linux on my desktop.

      It’s clearly a USB permission issue, but I don’t know what to do to make it work as a normal user like it does in MX. Any suggestions.

      Thank you.

      #20004
      Forum Admin
      rokytnji
        Helpful
        Up
        0
        ::

        Showing my camera card , with mistakes even. But it shows permissions are mine.

        harry@biker:~
        $ df -h
        Filesystem      Size  Used Avail Use% Mounted on
        udev            1.9G     0  1.9G   0% /dev
        tmpfs           389M  648K  388M   1% /run
        /dev/sda1        15G  8.2G  5.8G  59% /
        tmpfs           5.0M  4.0K  5.0M   1% /run/lock
        tmpfs           777M   25M  752M   4% /run/shm
        harry@biker:~
        $ df -h
        Filesystem      Size  Used Avail Use% Mounted on
        udev            1.9G     0  1.9G   0% /dev
        tmpfs           389M  664K  388M   1% /run
        /dev/sda1        15G  8.2G  5.8G  59% /
        tmpfs           5.0M  4.0K  5.0M   1% /run/lock
        tmpfs           777M   25M  752M   4% /run/shm
        /dev/sdb1       3.7G  3.6M  3.7G   1% /media/sdb1-usb-Generic_Storage_
        harry@biker:~
        $ cd /dev/sdb
        bash: cd: /dev/sdb: Not a directory
        harry@biker:~
        $ cd /dev/sdb1
        bash: cd: /dev/sdb1: Not a directory
        harry@biker:~
        $ cd /media/sdb1-usb-Generic_Storage_/
        harry@biker:/media/sdb1-usb-Generic_Storage_
        $ ls -l
        total 4
        drwxr-xr-x 3 harry harry 4096 Feb 21 17:21 DCIM
        harry@biker:/media/sdb1-usb-Generic_Storage_
        

        Just showing you how to check for permissions listed first.

        Sometimes I drive a crooked road to get my mind straight.
        Not all who Wander are Lost.
        I'm not outa place. I'm from outer space.

        Linux Registered User # 475019
        How to Search for AntiX solutions to your problems

        #20006
        Anonymous
          Helpful
          Up
          0
          ::

          curiosity got the best of me…

          websearch
          keypassxc yubikey

          first search result:

          https://keepassxc.org/docs/#faq-yubikey-incompatible

          Q. When I secure my database in KeePass2 with a YubiKey, I can’t open it in KeePassXC (or vice versa), why?

          A. Due to the fact that our YubiKey implementation differs from KeeChallenge’s, they are inherently incompatible (see question above). If you need compatibility between KeePass2 and KeePassXC, you cannot use YubiKeys at the moment.

          Not an exact enswer, but you get the idea…

          #20007
          Anonymous
            Helpful
            Up
            0
            ::

            https://github.com/cornelinux/yubikey-luks


            Yubikey for LUKS

            This package is inspired and based on https://github.com/tfheen/ykfde.

            This enables you to use the yubikey as 2FA for LUKS. The Password you enter is used as challenge for the yubikey

            The keyscript allows to boot the machine with either the password and the Yubikey or with a normal password from any key slot.

            luksSuspend/luksResume integration is inspired and based on https://github.com/zhongfu/ubuntu-luks-suspend

            https://packages.debian.org/sid/admin/yubikey-luks

            #20020
            Anonymous
              Helpful
              Up
              0
              ::

              Thanks for the info. I actually got it working just now by simply giving user permissions to the device following the procedure outlined here: here

              #20029
              Anonymous
                Helpful
                Up
                0
                ::

                congrats, and thanks for reporting the solution !

              Viewing 6 posts - 1 through 6 (of 6 total)
              • You must be logged in to reply to this topic.