Enter passphrase to unlock over and over

[mzupan]

v0.2.5 on mac

Keep getting the passpharse over and over. This didn't happen with the segment version. Is this somehow due to the binary not being signed?

➜ ./aws-okta-v0.2.5-darwin-amd64 exec tst -t 4h -- bash
Enter passphrase to unlock /Users/mzupan/.aws-okta/:

[neuralsandwich]

Hi @mzupan, I'm using that version currently and not experiencing that issue. What leads you to think that this is caused by a signing issue?

Could you provide the following before we look into this issue:

• macOS version
• aws-okta version (via aws-okta version)
• Console output of the multiple invocations of the commend with debug output (censored where needed)

[mzupan]

@neuralsandwich not sure it was a shot in the dark. I can use the segment version just fine

os x ver: big sur 11.2.1 (20D74)

➜ ./aws-okta-v0.2.5-darwin-amd64 version
aws-okta v0.2.5-dev

➜ ./aws-okta-v0.2.5-darwin-amd64 -d exec staging -- zsh
DEBU[0000] Parsing config file /Users/mzupan/.aws/config
DEBU[0000] Using KrItemPerSessionStore
DEBU[0000] cache get `staging session (62323333333635613335)`: miss (read error): The specified item could not be found in the keyring
DEBU[0000] Using aws_saml_url from profile staging: home/amazon_aws/0oa1o2zl3gCjxzMFJ2p7/272
DEBU[0000] Using okta provider (okta-creds)
Enter passphrase to unlock /Users/mzupan/.aws-okta/:
DEBU[0014] domain: company.okta.com
DEBU[0015] Failed to reuse session token, starting flow from start
DEBU[0015] Step: 1
DEBU[0016] Step: 2
INFO[0016] Requesting MFA. Please complete two-factor authentication with your second device
DEBU[0016] MFAConfig: {  phone1}
INFO[0016] Select a MFA from the following list
INFO[0016] 0: OKTA (push)
INFO[0016] 1: FIDO (webauthn)
INFO[0016] 2: OKTA (token:software:totp)
Select MFA method: 0

DEBU[0071] Okta Factor Provider: OKTA
DEBU[0071] Okta Factor ID: opfa0ifp2k7ukSWvi2p7
DEBU[0071] Okta Factor Type: push
DEBU[0071] Polling Okta
DEBU[0084] Step: 3
DEBU[0085] Got SAML role attribute: arn:aws:iam::######:saml-provider/okta,arn:aws:iam::######:role/okta-sso/okta-sso-en
DEBU[0085] Step 4: Assume Role with SAML
DEBU[0085] pOktaSessionCookieKey: okta-session-cookie
DEBU[0085] Writing session for michael.zupan to keyring
DEBU[0085] Using session TCBT, expires in 59m59.146997s
(⎈ docker-desktop:default)
~/Downloads via 🐍 system
➜ exit



(⎈ docker-desktop:default)
~/Downloads via 🐍 system took 1m 38s
➜ ./aws-okta-v0.2.5-darwin-amd64 -d exec staging -- zsh
DEBU[0000] Parsing config file /Users/mzupan/.aws/config
DEBU[0000] Using KrItemPerSessionStore
Enter passphrase to unlock /Users/mzupan/.aws-okta/:
DEBU[0004] cache get `staging session (62323333333635613335)`: hit
DEBU[0004] Using session TCBT, expires in 59m41.024096s
(⎈ docker-desktop:default)
~/Downloads via 🐍 system
➜

[sblack4]

I ran into this issue but moved the binary out of the downloads folder and made it executable (chmod +x ./aws-okta-v0.3.1-dev-darwin-amd64). I was then able to run it