Comments (24)
I can confirm that the @bisko workaround of configuring Karabiner-Elements to not modify events from the yubikey solves the USB error: kIOReturnExclusiveAccess
problem on sierra (10.12). Also, no need to run the yubikey tools with sudo
.
from yubikey-personalization.
I resolved my issue by removing all the opensc-tools, gpg, and then reboot(not sure if the reboot was needed).
from yubikey-personalization.
I have the same issue. I uninstalled gpg but I still getting this error. But the error is intermittent, usually it happens few yours after login. I am using the MacBook Pro (2017) with USB-C adaptor to be able to recognise my yubikey nfc. I wonder how I can provide more debug information.
As a regular user:
ykinfo -s
USB error: kIOReturnSuccess
as a root:
ykinfo -s
serial: 9638XXX
I am using Mac Mojave (10.14.5).
This issue is quite annoying because when it happens I am not able to use KeePassXC since the Yubikey is not recognised anymore.
from yubikey-personalization.
As per request from Yubico/yubico-pam#24 (comment)
Miguels-MacBook-Pro:~ miguel$ ykinfo -a
USB error: kIOReturnSuccess
(same result as if I ran ykpamcfg -2, trying to get challenge response to work on slot 2)
It works if I use sudo (e.g am root)
sh-3.2# ykinfo -a
serial: XXXXXXX
serial_hex: XXXXX
serial_modhex: XXXX
version: 3.2.0
touch_level: 1287
programming_sequence: 3
Mac OS X 10.9.2
Tested with Yubikey standard and Yubikey neo
from yubikey-personalization.
P.S I had no problem with the personalization tool on Mac as was otherwise reported in Yubico/yubikey-personalization-gui#25 - I programmed Slot 2 in Challenge Response mode but am unable to generate the challenge for it into ~/.yubico unless I use sudo/root to avoid the kIOReturnSuccess error above.
I am therefore not convinced it's an issue with the Personalization Tool but with permission related to USB devices in OS X 10.9.
See http://forum.yubico.com/viewtopic.php?t=1169&p=4373
from yubikey-personalization.
This might be relevant? (see last comment) http://stackoverflow.com/questions/13629199/how-can-a-daemon-user-access-hid-devices-without-getting-kioreturnnotprivileged
from yubikey-personalization.
Found the problem: I had the setting 'Secure Keyboard Entry' turned on in my iTerm/Terminal. Something about this setting triggers some OS X setting designed to prevent keylogging, which appears to have prevented the ykinfo/ykpamcfg tools from interacting with what OS X considered to be a keyboard.
Disabling 'Secure Keyboard Entry' allowed me to run ykpamcfg and get my screensaver 2-factor auth working!
from yubikey-personalization.
I'm happy you resolved this. We'll add this to our documentation. I'm not convinced this is the only Mac-related issue, though, so I'm keeping this issue open to track other Mac issues.
from yubikey-personalization.
This is still an issue in OS X 10.10 (Yosemite). I'm running iTerm2 and I have 'Secure Keyboard Entry' disabled and I still cannot use the yk* tools as a non-admin user. I also tried directly via Terminal.app and experience the same problem. I'm guessing it probably has to do with the stackoverflow topic linked by mig5.
EDIT: The obvious method of setting suid on the binaries does cause them to work but, of course, is not optimal.
from yubikey-personalization.
@pkutzner You need to restard iTerm2 after disabling Secure Keyboard Entry and it work fine on Yosemite
from yubikey-personalization.
Hi,
I'm french...;-) Today 9 march 2015
I m testing yubico neo for french medical issue ( of Accounting Double Certification).
:oops: :oops:
A big bug with this issue ...
the pb:when I'm program Static password.I'm using a french (azerty) keyboard, so I need to enable the "use numeric keyboard" option. but in keyboard: choose a layout... I only find :US keyboard...
The neo fails typing numbers (when used as a USB key). on a mac...
PS:
This work if i change the keyboard to us keyboard.
But I m in french by default;-(
Can i have an idea of when is resolve? .
Thank
from yubikey-personalization.
I ran in to the same problem, I believe the issue is with access to the USB devices. However the odd part about this is that I have two macs. One with disk encryption (macbook pro) the other a desktop with out it, and the one with disk encryption does not work. I wonder if any of you having issues with the Mac are also using disk encryption?.
Output from Macbook Pro
➜ yubikey ykinfo -a
USB error: kIOReturnSuccess
➜ yubikey sudo ykinfo -a
serial: xxxxxxxx
serial_hex: xxxxxxxx
serial_modhex: xxxxxxxx
version: 3.4.0
touch_level: 1551
programming_sequence: 3
slot1_status: 1
slot2_status: 1
vendor_id: 1050
product_id: 111
-Victor
from yubikey-personalization.
Can this issue be closed ?
As of today, building on OSX and using the tool as described works pretty fine (OSX 10.11.6).
from yubikey-personalization.
Don't close, I just had the same problem, and I have opensc-tools/gpg. Maybe something locked the device?
from yubikey-personalization.
@methou Could you dump your system information, as well as related software versions and installation methods (e.g. opensc-tools, gpg, yuibkey-personalization etc ?).
Are you perchance running gpg-agent
as well ?
from yubikey-personalization.
@thorduri unfortunately, my MacBook was sent in for repair, and I'm not getting it back for at least a week. The problem is exactly like what they've described before, that you have to sudo
to get it working properly. For all I know, I was using the latest Homebrew versions of opensc-tools and GnuPG 2.1 on 2016-10-02, my mac is a late 2013 model running macOS Sierra with latest updates. iirc, I had no problem with CLI ykneo-manager
on El Capitan.
I think I'll be settled with sudo
and/or GUI tools.
from yubikey-personalization.
Same here, USB error: kIOReturnExclusiveAccess
on 1.17.3 with or without sudo on Sierra.
from yubikey-personalization.
Same here:
sudo ykinfo -a
USB error: kIOReturnExclusiveAccess`
On 10.12.2, yubikey neo
from yubikey-personalization.
Shared in the Yubico/yubikey-personalization-gui#25 as acomment. Adding here too:
I just noticed something else that can cause the
kIOReturnExclusiveAccess
error in the Diagnostics screen, which you can access by Right-clicking theyubico
logo on the bottom right.If you're running a keyboard altering tool, like Karabiner ( old KeyRemap4MacBook or the newer version Karabiner-Elements ) it may be causing the Secure Keyboard Entry protection or something similar to it to activate, which blocks access to the YubiKey.
Try to stop all possible external tools you may have installed and see if the YubiKey will get recognized.
UPDATE: It seems that there is no need to quit Karabiner-Elements. You just have to untick the YubiKey in "Modify events from this device" under the Devices tab. I think it needs to be done for each key if there are multiple keys.
from yubikey-personalization.
Any way this can be put on the public website FAQ (the Karabiner-Elements issue)? I just spent like 2 hours trying to figure out why my YubiKey4 wasn't working on Sierra.
from yubikey-personalization.
Unfortunately this issue is still relevant.
brew uninstall gpg
resolved it for me, although that means i can't use gpg anymore :)
Any suggestions on how to make it work?
Update: everything seems to work fine with GPG Suite installed from https://gpgtools.org/
from yubikey-personalization.
I am having the same problem as @thobryan also on a Macbook Pro also on macOS Mojave.
The KeePassXC problem is my main problem.
When running KeePassXC as root, it does detect the YubiKeys again.
Yubico/yubikey-personalization-gui#25
keepassxreboot/keepassxc#3970
from yubikey-personalization.
Same here. Happens a few hours after login in. It might be related to the "secure keyboard" entry and or Keybase; noticed the issue happening always after opening either the terminal or keybase.
from yubikey-personalization.
Not working... sad that such tools are advertised on the website, yet updating them was left to...
from yubikey-personalization.
Related Issues (20)
- multiple potential memory leaks
- infinite loop for particular command line arguments
- YubiKey index is not stable HOT 6
- fg
- Blink LED when waiting for touch HOT 3
- 1.20.0 + master: autoreconf and compile time warnings
- compatiblility with google-authenticator? HOT 4
- Key is not fully recognized on coldplug
- Warning about setting mode should be updated HOT 1
- yk_open_key causes the keyboard HID interface to reset
- Support for Apple Silicon - Cross Compile to ARM64 HOT 3
- ykchalresp returns the same response for 2 different challenges HOT 6
- Invalid fixed string
- Cannot remove OTP locking code
- Messed up conf: keypress gives me 32 chars instead of 44
- YubiKey C Bio - FIDO Edition is not recognized by YubiKey Personalization Tool. HOT 1
- Text is hard to read under dark theme in KDE HOT 1
- configure: error: libyubikey v1.5+ not found, see https://developers.yubico.com/yubico-c/ HOT 1
- Yubikey core error: no yubikey present
- Linux compilation error in ykpers-json.c
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from yubikey-personalization.