Google Online Account Two Factor with hardware key fails immediately
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Webkit |
Fix Released
|
Medium
|
|||
gnome-online-accounts |
Fix Released
|
Unknown
|
|||
gnome-online-accounts (Ubuntu) |
Triaged
|
Low
|
Unassigned |
Bug Description
The hardware key authentication two factor fails immediately with a web based retry dialogue when connecting a Google account to the online accounts in settings using a hardware key second factor.
Steps to reproduce:
1. Set Google Account to default to a hardware security key like a Yubikey or other FIDO standard key after having two factor authentication enabled on your Google Account.
2. Open Online accounts
3. Add a Google Account
4. Enter google email address
5. Enter google password
6. (this is the login flow of two factor, if default is the hardware key the error should appear).
Work around:
Choose use another method to authenticate: enter the authentication code and you will proceed.
Expectations were:
The ability to use the hardware key to authenticate as the second factor.
ProblemType: Bug
DistroRelease: Ubuntu 17.10
Package: gnome-control-
ProcVersionSign
Uname: Linux 4.13.0-
NonfreeKernelMo
ApportVersion: 2.20.7-0ubuntu3.4
Architecture: amd64
CurrentDesktop: ubuntu:GNOME
Date: Fri Nov 17 16:01:11 2017
EcryptfsInUse: Yes
ExecutablePath: /usr/bin/
ProcEnviron:
XDG_RUNTIME_
SHELL=/bin/bash
PATH=(custom, user)
LANG=en_US.UTF-8
SourcePackage: gnome-control-
UpgradeStatus: No upgrade log present (probably fresh install)
Changed in gnome-online-accounts: | |
importance: | Unknown → Medium |
status: | Unknown → Confirmed |
Changed in gnome-online-accounts: | |
status: | Confirmed → Unknown |
Changed in gnome-online-accounts (Ubuntu): | |
status: | New → Triaged |
Changed in webkit: | |
importance: | Unknown → Medium |
status: | Unknown → Fix Released |
Changed in gnome-online-accounts: | |
importance: | Medium → Unknown |
Changed in gnome-online-accounts: | |
status: | Unknown → New |
Changed in gnome-online-accounts: | |
status: | New → Fix Released |
The FIDO Universal Second Factor (U2F) protocol is an open specification that was recently finalized. The FINAL spec can be downloaded here: https:/ /fidoalliance. org/specs/ fido-u2f- v1.0-ps- 20141009. zip