| Summary: | app-crypt/ccid-1.5.1: does not automatically start (not-enabled) pcscd service when YubiKey is plugged | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | YOSHIOKA Takuma <lo48576> |
| Component: | Current packages | Assignee: | No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it <maintainer-needed> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | alexander, lo48576, thican |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
After upgrade to app-crypt/ccid-1.5.1 I noticed that pcscd daemon will not start automatically anymore due to changes in /lib/udev/rules.d/92-pcsc-ccid.rules. So this might be the cause for your issue as well. If you run systemd, try "systemctl enable pcscd.socket" (In reply to Alexander Tsoy from comment #1) > After upgrade to app-crypt/ccid-1.5.1 I noticed that pcscd daemon will not > start automatically anymore due to changes in > /lib/udev/rules.d/92-pcsc-ccid.rules. So this might be the cause for your > issue as well. > > If you run systemd, try "systemctl enable pcscd.socket" Thank you, confirmed that yubioath-desktop works as expected with `pcscd.socket` started. Looks like this should either be closed or reassigned to app-crypt/ccid, then. I don’t have a Yubikey so I cannot verify, but I think this is the same issue than bug 902847, from where I provided a fix in a PR. (In reply to Thibaud CANALE from comment #4) > I don’t have a Yubikey so I cannot verify, but I think this is the same > issue than bug 902847, from where I provided a fix in a PR. Thank you. Confirmed with my Yubikey that the problem is fixed. With sys-apps/pcsc-lite-2.0.1-r1 installed, `pcscd.service` is automatically started even when `pcscd.socket` is disabled. Now yubioath-desktop (original report) and git signing with GnuPG both works as intended. Closing as resolved/fixed. |
With app-crypt/ccid-1.5.1 installed, app-crypt/yubioath-desktop-5.1.0-r3 does not recognize accounts already registered to Yubikey, and emits error "WARNING: PC/SC not available. Smart card protocols will not function." to stderr. Reproducible: Always Steps to Reproduce: 1. Install or update to app-crypt/yubioath-desktop-5.1.0-r3 and app-crypt/ccid to 1.5.1. 2. Run `yubioath-desktop` command, and insert Yubikey with some TOTP accounts registered. Actual Results: yubioath-desktop shows an error message "WARNING: PC/SC not available. Smart card protocols will not function." to stderr, and GUI says "No accounts". Expected Results: yubioath-desktop shows the TOTP accounts registered to the inserted Yubikey. The issue does not reproduce with app-crypt/ccid-1.5.0, so you can downgrade it as a workaround. Console with app-crypt/ccid-1.5.1: ``` $ yubioath-desktop qrc:/qml/main.qml:305:5: QML Shortcut: Shortcut: Only binding to one of multiple key bindings associated with 7. Use 'sequences: [ <key> ]' to bind to all of them. qrc:/qml/main.qml:297:5: QML Shortcut: Shortcut: Only binding to one of multiple key bindings associated with 9. Use 'sequences: [ <key> ]' to bind to all of them. QSystemTrayIcon::setVisible: No Icon set Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. WARNING: PC/SC not available. Smart card protocols will not function. qml: calculateAll failed: No eligiable connections are available ([<class 'yubikit.core.smartcard.SmartCardConnection'>]). ``` Console with app-crypt/ccid-1.5.0: ``` $ yubioath-desktop qrc:/qml/main.qml:305:5: QML Shortcut: Shortcut: Only binding to one of multiple key bindings associated with 7. Use 'sequences: [ <key> ]' to bind to all of them. qrc:/qml/main.qml:297:5: QML Shortcut: Shortcut: Only binding to one of multiple key bindings associated with 9. Use 'sequences: [ <key> ]' to bind to all of them. QSystemTrayIcon::setVisible: No Icon set Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations. ``` `emerge --info`: ``` Portage 3.0.44 (python 3.10.9-final-0, default/linux/amd64/17.1/systemd/merged-usr, gcc-12, glibc-2.36-r7, 6.1.9-gentoo x86_64) ================================================================= System uname: Linux-6.1.9-gentoo-x86_64-AMD_Ryzen_9_7950X_16-Core_Processor-with-glibc2.36 KiB Mem: 32003684 total, 12952236 free KiB Swap: 0 total, 0 free Timestamp of repository gentoo: Thu, 02 Feb 2023 19:16:59 +0000 Head commit of repository gentoo: e5cbe0f27d84aa005584ab0b5b9eaf95d83ae50b Head commit of repository gentoo-zh: a4d19afe5f5be91c297118126545f07cd9dcbeb8 Timestamp of repository guru: Wed, 01 Feb 2023 21:46:56 +0000 Head commit of repository guru: af03e7349476dc49fa8ef2952d8c22968e15448d Timestamp of repository haskell: Wed, 01 Feb 2023 17:16:54 +0000 Head commit of repository haskell: 35c0dc43fe5da3c0b831e754e3ef131050803d70 sh bash 5.2_p15-r1 ld GNU ld (Gentoo 2.40 p1) 2.40 app-misc/pax-utils: 1.3.7::gentoo app-shells/bash: 5.2_p15-r1::gentoo dev-lang/perl: 5.36.0-r2::gentoo dev-lang/python: 3.10.9-r1::gentoo, 3.11.1-r1::gentoo dev-lang/rust: 1.67.0::gentoo dev-util/cmake: 3.25.2::gentoo dev-util/meson: 1.0.0::gentoo sys-apps/baselayout: 2.13-r1::gentoo sys-apps/sandbox: 2.30-r1::gentoo sys-apps/systemd: 252.5::gentoo sys-devel/autoconf: 2.13-r7::gentoo, 2.71-r5::gentoo sys-devel/automake: 1.16.5::gentoo sys-devel/binutils: 2.40::gentoo sys-devel/binutils-config: 5.5::gentoo sys-devel/clang: 15.0.7-r1::gentoo sys-devel/gcc: 11.3.1_p20230120-r1::gentoo, 12.2.1_p20230121-r1::gentoo sys-devel/gcc-config: 2.10::gentoo sys-devel/libtool: 2.4.7-r1::gentoo sys-devel/lld: 15.0.7::gentoo sys-devel/llvm: 15.0.7::gentoo sys-devel/make: 4.4::gentoo sys-kernel/linux-headers: 6.1::gentoo (virtual/os-headers) sys-libs/glibc: 2.36-r7::gentoo Repositories: gentoo location: /var/db/repos/gentoo sync-type: git sync-uri: https://github.com/gentoo-mirror/gentoo.git sync-user: portage priority: -1000 eclass-overrides: lo48576 volatile: True sync-git-verify-commit-signature: true gentoo-zh location: /var/db/repos/gentoo-zh sync-type: git sync-uri: https://github.com/microcai/gentoo-zh.git masters: gentoo priority: -100 eclass-overrides: lo48576 volatile: True guru location: /var/db/repos/guru sync-type: git sync-uri: https://github.com/gentoo-mirror/guru.git masters: gentoo eclass-overrides: lo48576 volatile: True haskell location: /var/db/repos/haskell sync-type: git sync-uri: https://github.com/gentoo-mirror/haskell.git masters: gentoo eclass-overrides: lo48576 volatile: True lo48576 location: /var/db/repos/lo48576 masters: gentoo priority: 100 eclass-overrides: lo48576 volatile: True Installed sets: @fav/fonts, @packages/ansible, @packages/pipewire, @purpose/yubikey, @purpose/zeroconf, @system/core, @system/filesystem, @system/gentoo-utils, @system/xorg-basic-utils ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="@FREE @BINARY-REDISTRIBUTABLE" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/var/cache/distfiles" ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME" FCFLAGS="-march=native -O2 -pipe" FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg-live config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch pid-sandbox preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-march=native -O2 -pipe" GENTOO_MIRRORS=" https://ftp.iij.ad.jp/pub/linux/gentoo https://ftp.riken.jp/Linux/gentoo https://ftp.jaist.ac.jp/pub/Linux/Gentoo http://ftp.iij.ad.jp/pub/linux/gentoo http://ftp.riken.jp/Linux/gentoo http://ftp.jaist.ac.jp/pub/Linux/Gentoo " INSTALL_MASK=" /usr/bin/netaddr" LANG="ja_JP.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LEX="flex" MAKEOPTS="-j32" PKGDIR="/var/cache/binpkgs" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" SHELL="/bin/zsh" USE="X aac acl acpi alsa amd64 apparmor avif bluetooth bluray bzip2 cairo cdr cjk cli crypt css curl dbus dri dvd dvdr egl exif ffmpeg flac fontconfig fortran gdbm gmp gnome-keyring gtk iconv icu inotify ipv6 jpeg jpeg2k lame libglvnd libnotify libtirpc linguas_en linguas_ja luajit lzma m17n-lib matroska mp3 mp4 mpeg multilib ncurses nls nptl ogg opengl openmp opus pam pcre pipewire png policykit pulseaudio readline screencast seccomp sqlite ssl startup-notification systemd taglib test-rust theora threads tiff tls truetype udev udisks unicode upower usb vaapi vorbis vulkan wavpack wayland wifi xattr xft xinerama xrandr zeroconf zlib zsh-completion zstd" ABI_X86="64" ADA_TARGET="gnat_2021" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 avx512f avx512dq avx512cd avx512bw avx512vl avx512vbmi f16c fma3 mmx mmxext pclmul popcnt rdrand sha sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="libinput wacom" KERNEL="linux" L10N="en ja" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-4 php8-0" POSTGRES_TARGETS="postgres12 postgres13" PYTHON_SINGLE_TARGET="python3_10" PYTHON_TARGETS="python3_10" RUBY_TARGETS="ruby31" USERLAND="GNU" VIDEO_CARDS="amdgpu fbdev nouveau radeonsi" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq proto steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EMERGE_DEFAULT_OPTS, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, LC_ALL, LD, LFLAGS, LIBTOOL, LINGUAS, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS ```