U2F fails in batch mode
See original GitHub issueWhen using batch mode with a 2FA Yubikey enabled account, keeper prompts for the U2F touch however immediately falls through to a 2FA code prompt, as if “Enter” had been pressed.
env:
% sw_vers
ProductName: Mac OS X
ProductVersion: 10.15.4
BuildVersion: 19E287
% keeper --version
Keeper Commander, version 4.31
- keeper installed via
pip3
, per readme
repro:
% rm config.json
% echo 'whoami' | keeper --user 'user@example.com' -
Password:
Touch the flashing U2F device to authenticate or press Enter to resume with the primary two factor authentication...
Two-Factor Code:
- same thing when using
--batch-mode shell
- fwiw, the yubikey begins flashing at the expected time; entering a valid code succeeds
Issue Analytics
- State:
- Created 3 years ago
- Comments:13 (13 by maintainers)
Top Results From Across the Web
pamu2fcfg failure with Thetis key with libu2f-host 1.1.8-1 #115
Starting with libu2f-host version 1.1.8-1 from the Yubico Ubuntu PPA, the pamu2fcfg registration procedure fails for my Thetis FIDO U2F ...
Read more >YubiKey - ArchWiki
YubiKey Full Disk Encryption — Use challenge-response mode to create strong LUKS passphrases. Supports full disk encryption.
Read more >[SOLVED] Cannot register on test site from Linux - Yubico Forum
I have two Yubico FIDO U2F security keys. Neither works with the demo page at: http://demo.yubico.com/u2f. I visited the page with Chrome ...
Read more >Universal 2nd Factor (U2F) Overview - FIDO Alliance
The FIDO U2F protocol enables relying parties to offer a strong ... in any manner for identifying or failing to identify any or...
Read more >YubiKey - Gentoo Wiki
Testing PAM with a YubiKey. In order to test that everything works, temporarily configure PAM to use a YubiKey without locking the user...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
I’m not sure if it is documented but Commander is supposed to suppress command errors if commands start with
@
For instance:does not fail if the folder exists
Also the Commander’s commands can be stored to some file then
keeper --user "${keeperuser}" <filename>
Commander will execute commands from the file.