Unable to communicate to the device, authenticator error about pam-u2f

[a-dma]

it looks like libu2f-host is sad for some reason.

What kind of U2F rules do you have on your system? Is the device (as in /dev/xxx) accessible by your user?

[Conobi]

Thanks for your answer.
If you are talking of udev rules,

I only have these rules writed in /etc/udev/rules.d/70-u2f.rules.
If you are talking about pam rules, i use these rules in /etc/pam.d/su :

# Begin /etc/pam.d/su

# always allow root
auth	  sufficient  pam_rootok.so
#auth	   include     system-auth

# include the default account settings
account   include     system-account

# Set default environment variables for the service user
session   required    pam_env.so

# include system session defaults
session   include     system-session

# End /etc/pam.d/su

# Allow YubiKey auth
auth sufficient pam_u2f.so debug authfile=/etc/u2f_mappings cue
#auth required pam_unix.so use_first_pass
auth include system-auth

My device, /dev/hidraw0 has these permissions:
crw-rw----+ 1 root root 248, 0 15 sept. 14:56 /dev/hidraw0

[a-dma]

that looks alright to me.
Which distribution are you running? Would you mind trying to use u2f-host in verbose mode to perform a test registration?

[Conobi]

I'm using Solus OS 3.0.
How can i use u2f-host in verbose mode with pam-u2f? Or i just do a test with only u2f-host, like register/log in?

[a-dma]

I'm using Solus OS 3.0.
Not familiar with this distro

Yes, what I mean is just trying to do a manual registration/authentication with u2f-host since I suspect there (or better in libu2f-host) is where the problem is. If that fails in the same way trying re-running the u2f-host command as root.

[Conobi]

Using the tutorial on the readme of libu2f-host, it works perfectly, without any error.

[a-dma]

It seems like there is either a configuration error or something in your system is very weird.
JeanPwet is your user name and DestrucThor your host name, correct?

Are you sure you used pamu2fcfg with the right values? If so could you try specifying them in the module explicitly?

[simbalion]

I'm having the same error but with a different output log:

[../util.c:get_devices_from_authfile(200)] Found 1 device(s) for user simba
Please touch the device.
[../util.c:do_authentication(262)] Device max index is 0
[../util.c:do_authentication(288)] Attempting authentication with device number 1
[../util.c:do_authentication(310)] Challenge: { "keyHandle": "***" }
[../util.c:do_authentication(328)] Unable to communicate to the device, authenticator error
[../pam-u2f.c:pam_sm_authenticate(256)] do_authentication returned -2
[../pam-u2f.c:pam_sm_authenticate(275)] done. [Authentication failure]
[sudo] password for simba: