shtirlic / yubikeylockd Goto Github PK

Dear All,
I've noticed the following issue on Catalina vs Mojave. Following installing yubikeylockd through homebrew as directed/suggested on Catalina, correct password entry at screensaver unlocks session and any/all apps open and running at lock are in correct state. However, if no/incorrect password is entered, there is a 3-5 sec delay before macOS presents a generic login. When correct username and password is entered at this point, session starts and reopens apps but not in same state as when initially locked. Notably, macOS status bar appears to reload, suggesting a new session is being initiated.

I only have one machine running Catalina exhibiting this behavior while two machine on Mojave behave as expected. So while Catalina appears to be the culprit, it could be a misconfiguration I'm not taking into account.

Please let me know if additional information would be helpful in diagnosis.

Thank you in advance.

Instructions:

brew tap shtirlic/yubikeylockd https://github.com/shtirlic/yubikeylockd
brew install shtirlic/yubikeylockd/yubikeylockd

Hi,
may you help me to recompile your great work to start screensaver (and lock the Mac) instead of put display to sleep? (I have a fantastic screensaver https://github.com/JohnCoates/Aerial)

I've tried to comment line from 47 to 51 and add

system("sudo -u myuser /System/Library/CoreServices/ScreenSaverEngine.app/Contents/MacOS/ScreenSaverEngine");

but it start a screensaver as root (I think because is the default screensaver and than I can't login anymore).

Thank you!! 😊

Hello,

I'm trying to install but run into error below.
I'm on Sierra.

$ git clone https://github.com/shtirlic/yubikeylockd.git
cd yubikeylockd && make all

Cloning into 'yubikeylockd'...
remote: Counting objects: 56, done.
remote: Total 56 (delta 0), reused 0 (delta 0), pack-reused 56
Unpacking objects: 100% (56/56), done.
xcrun: error: invalid active developer path (/Library/Developer/CommandLineTools), missing xcrun at: /Library/Developer/CommandLineTools/usr/bin/xcrun

It would be nice to have some documentation to remove the service.

I think I was able to do it by changing to the project directory, where I ran the make command and running the following command launchctl unload com.podtynnyi.yubikeylockd.plist

This is super useful and I would like to develop it more, but there isn't much point if it doesn't have an open license. Would you mind giving it one? :)

When YubiKey is removed, workstation is locked and keychain is locked as it can be seen here. I understand why, but this creates some problems for me.

When I log back in from time to time I get prompted to enter credentials for system accounts (e.g. google accounts for calendar sync, iCloud, Tunnelblick stored credentials for VPN). I am not really sure why this happens, but I would be happy if there was an option to just lock workstation or just put it to sleep (simulate Cmd+Shift+Power or Cmd+Ctrl+Q) without keychain lock.

So, I forked this project to check if that would solve my problem and it seems that it does.

Would you be open to having such an option in main repository? I image that it could be optional (e.g. brew install <url> --without-keychain-lock. I am not really familiar with brew formulas, so I am not sure how to do it from the top of my head, but I did see that some formulas have such options. If you are open to this suggestion, maybe I could investigate and provide pull request. Otherwise I can continue using my fork, but I expect that other people will have similar problems and I don't really want to maintain separate fork.

Thanks.

Sometimes I need to leave my laptop unlocked when removing the Yubikey (e.g. when transferring it a short distance and unplugging the USB hub). Would it be possible to add a check for a modifier key (e.g. CTRL) is not pressed before locking?

Thanks

When installing via homebrew 4.1.14 on macOS 11.7.10 according to the instructions on the README the following error is raised and installation failes.

Error: shtirlic/yubikeylockd/yubikeylockd: Calling plist_options is disabled! Use service.require_root instead.
Please report this issue to the shtirlic/yubikeylockd tap (not Homebrew/brew or Homebrew/homebrew-core), or even better, submit a PR to fix it:
  /usr/local/Homebrew/Library/Taps/shtirlic/homebrew-yubikeylockd/yubikeylockd.rb:15