search

Yubico / python-yubico

Python code to talk to YubiKeys
https://developers.yubico.com/python-yubico/
BSD 2-Clause "Simplified" License
229 stars 33 forks source link

reboot yubikey via python call? #28

Closed the2nd closed 8 years ago

the2nd commented 8 years ago

Hi,

is it possible to reboot a yubikey via a python call just like it does when its re plugged?

the reason for asking this is because i've implemented a OTPme token type that uses the ssh agent interface of gpg-agent (using yubikeys gpg applet in this case) to allow OTPme logins using standard ssh keys. that works great with my yubikey for PAM logins but when doing e.g. a KDE screen unlock i want to make sure that the yubikey requires the PIN (that is passed from my PAM module to gpg-agent) to sign any ssh message, even if the user has not re plugged its yubikey. my current workaround is to restart gpg-agent on screen unlock but that brings in a annoying delay.

i hope this is the right place to ask this question as i found no mailing list ....

dainnilsson commented 8 years ago

No, that's not possible unfortunately. You can configure scdaemon to release the card after a while (which I believe will cause it to require PIN again, on use), see the last post here: http://forum.yubico.com/viewtopic.php?f=26&t=1785 I'm not sure if that fixes your delay issue or not, but it could be worth a shot!