New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 768224 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Yubico TFA flaky on high sierra

Reported by dim...@gmail.com, Sep 24 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3222.0 Safari/537.36

Steps to reproduce the problem:
1. Initial state: yubico USB key not connected; github configured for TFA; signed out.
2. go to github, click sign in, provide username and password
3. you are prompted for TFA
4. insert yubico key into the USB port, it starts blinking (expected)
5. touch the key, nothing happens
6. after a short while, key stops blinking
7. github web page keeps waiting for the security key

What is the expected behavior?

What went wrong?
If the security key is inserted on demand, it's either "not connected to requesting page" or chrome gives up too quickly.

Sometimes, if key is "pressed" really quickly it works, usually it doesn't.

However, the following always works:
* connect the key and let it settle
* go to github, provide username and password
* github page asks for TFA
* key starts blinking
* touch the key
* it works!

Did this work before? Yes macOS Sierra

Chrome version: 63.0.3222.0  Channel: canary
OS Version: OS X 10.13.0
Flash Version:
 
Labels: Needs-Bisect Needs-Triage-M63
Cc: susanjuniab@chromium.org
Components: Blink>USB
Labels: -Needs-Bisect Needs-Feedback
dimaqq@ thanks for the issue.

Unable to reproduce this issue on MacOS High Sierra 10.13, MacOS Sierra 10.12.6 and Windows 7 using the latest Canary 63.0.3223.0 and latest Stable 61.0.3163.100 with the below steps.

1. Launched Chrome and navigated to https://github.com/.
2. Created a profile on Github and added a two-factor authentication with Yubico Security Key.
3. Logged off the profile and signed-in again.
4. Insert your security Key prompt is shown.
5. Inserted the security key in the USB port and touched it. was able to sign in with no issues.

Please find the attached screen-cast for reference.

Request you to please retry the issue on a new chrome profile without any flags/extensions and update the thread if you see any issues.

Thanks...
768224.webm
3.7 MB View Download
Components: -Blink>USB Blink>WebAuthentication IO>HID

Comment 4 by dim...@gmail.com, Sep 27 2017

Hi, sorry I won't have access to a mac for next 3 weeks and won't be able to re-test.
Feel free to punt for now.
Project Member

Comment 5 by sheriffbot@chromium.org, Sep 27 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "susanjuniab@chromium.org" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: piperc@chromium.org
Labels: Needs-Feedback
dimaqq@, when you get back to your machine can you pull the contents of chrome://device-log?
Status: WontFix (was: Unconfirmed)
Mac triage: closing old issue without feedback or repro case.

Comment 9 by dim...@gmail.com, Feb 14 2018

Here's the device log:


Add a QueryParam in URL to auto-refresh the page: chrome://device-log/?refresh=<sec>

Refresh Show:   Error   User   Event   Debug   Login   Network   Power   Bluetooth   USB   HID   File Info   Detailed Timestamps
USBUser[2018/02/14 19:43:50.195682] usb_service_impl.cc:478 USB device added: vendor=4176 "Yubico", product=529 "Yubico WinUSB Gnubby (gnubby1)", serial="", guid=ea5f92f9-1620-4bc0-8814-713f543a1020

USBEvent[2018/02/14 19:43:50.194627] usb_device_impl.cc:96 Failed to get active configuration: Entity not found

HIDUser[2018/02/14 19:43:47.034233] hid_service.cc:83 HID device detected: vendorId=1452, productId=588, name='Apple Internal Keyboard / Trackpad', serial='', deviceId='4294967994'

HIDUser[2018/02/14 19:43:47.034065] hid_service.cc:83 HID device detected: vendorId=1452, productId=588, name='Apple Internal Keyboard / Trackpad', serial='', deviceId='4294967999'

HIDUser[2018/02/14 19:43:47.033913] hid_service.cc:83 HID device detected: vendorId=1452, productId=588, name='Apple Internal Keyboard / Trackpad', serial='', deviceId='4294967997'

HIDUser[2018/02/14 19:43:47.033757] hid_service.cc:83 HID device detected: vendorId=0, productId=0, name='Apple Mikey HID Driver', serial='', deviceId='4294968262'

USBUser[2018/02/05 04:48:54.804322] usb_service_impl.cc:478 USB device added: vendor=1452 "Apple Inc.", product=34058 "FaceTime Camera (Built-in)", serial="CCGB642PW5DL8LFX", guid=1e1cee76-831d-4ed4-ad9b-5e97fa9ac1ec

USBUser[2018/02/05 04:48:54.804110] usb_service_impl.cc:478 USB device added: vendor=1452 "Apple", product=33796 "Internal Memory Card Reader", serial="000000000310", guid=b91fcc90-c934-408b-9411-a5661180e2f1

USBUser[2018/02/05 04:48:54.803738] usb_service_impl.cc:478 USB device added: vendor=1452 "Apple Inc.", product=588 "Apple Internal Keyboard / Trackpad", serial="", guid=a4fd5d51-d7ec-42ef-8a1d-c8892d64e487

USBUser[2018/02/05 04:48:54.802680] usb_service_impl.cc:478 USB device added: vendor=1452 "Apple Inc.", product=33311 "Bluetooth USB Host Controller", serial="", guid=e5bb9962-f66f-46d4-bcf1-fe19345c6072

BluetoothEvent[2018/02/05 02:04:31.733588] bluetooth_api.cc:68 BluetoothAPI: 0x7fe872d0e780


Latest Chrome version: 63.0.3239.132 (Official Build) (64-bit)


Note that problem only manifests if I plug the TFA thingy after being prompted.
If TFA thingy is plugged in in advance, logon seems to go through smoothly.

Sign in to add a comment