Closed tomm87 closed 1 year ago
Problem solved, please disregard!
Quick solution: Add non-root user to group softhsm, then run softhsm2-util and softfido as that user.
Longer explanation: I re-thought running softfido as root. I was doing so because SoftHSM seemed to need be run as root because it's config file isn't readable by the non-root XFCE user, so I initialized the token as root, and then the token storage was readable only by root, so I ran softfido as root so it could use SoftHSM.
I retraced my steps from the beginning to ensure I'd overlooked nothing, and noticed that the SoftHSM config file is readable not only by root but by the softhsm group. So I added my non-root XFCE user to that group, and was able to run SoftHSM just fine, and the token storage was readable by me (as non-root) also.
This in turn allowed running softfido as myself, which solved the PIN entry problem -- the GUI PIN prompt displays fine, and also the prompts to allow authentication & registration ceremonies.
So, problem solved, softfido is awesome, and thank you!
Hi, me again.
After a successful build (thank you!), I was able to initialize a token with softhsm2-util, but when I launch softfido I get the following:
I think this has something to do with not being able to launch a GUI PIN entry screen? I'm running softfido as root, because doing so avoids an earlier error that I suspect is related to the SoftHSM token storage folder being readable only by root. But I'm not logged into my XFCE desktop as root, so to allow root to put a window on the desktop, I tried the following, in a terminal as the (non-root) XFCE user:
but this made no noticeable difference when running softfido. I don't understand D-bus, so I don't know if I used that command correctly.
I also tried manually setting XAUTHORITY and DISPLAY, and this allows me to run xcalc as root, but makes no noticeable difference to softfido.
It said it would try to fall back to curses, but that didn't seem to happen. That would be a perfectly good solution also.
I'm doing this on:
Thanks for any suggestions, Tom