On 12/06/12 00:22, Alexander Hall wrote:
On 12/02/12 14:31, Andreas Bartelt wrote:
Hello,
I've set up yubikey OTP authentication and also want to use it for
xlock(1) authentication.
/var/db/yubikey has permissions 770 for root:auth.
In case no `user`.ctr file exists in /var/db/yubikey at first login
via yubikey, it is created automatically with permissions 644.
This fails in case of xlock(1) authentication via yubikey: [from
/var/log/authlog] yubikey: user test: fopen:
/var/db/yubikey/test.ctr: Permission denied
Changing `user`.ctr permissions to 660 for root:auth makes it work.
Should 660 be the default permissions for `user`.ctr?
Yeah, that makes sense. I remember having issues with xlock myself
but I didn't investigate it enough it seems.
Does the diff below fix your issues?
yes, permissions for `user`.crt are set correctly now.
Thanks,
Andreas