On 12/06/12 00:22, Alexander Hall wrote:
On 12/02/12 14:31, Andreas Bartelt wrote:
Hello,

I've set up yubikey OTP authentication and also want to use it for
xlock(1) authentication.

/var/db/yubikey has permissions 770 for root:auth.

In case no `user`.ctr file exists in /var/db/yubikey at first login
via yubikey, it is created automatically with permissions 644.

This fails in case of xlock(1) authentication via yubikey: [from
/var/log/authlog] yubikey: user test: fopen:
/var/db/yubikey/test.ctr: Permission denied

Changing `user`.ctr permissions to 660 for root:auth makes it work.

Should 660 be the default permissions for `user`.ctr?

Yeah, that makes sense. I remember having issues with xlock myself
but I didn't investigate it enough it seems.

Does the diff below fix your issues?


yes, permissions for `user`.crt are set correctly now.

Thanks,
Andreas

Reply via email to