We’ve been getting the Autodesk sign-in wall on Flame 2027.1:
Unable to authorize license
Your system settings, firewall, or antivirus are likely preventing sign in.
It’s not the license server, and it’s not Boris/Neat. It’s Autodesk’s IDSDK / SSO stack that 2027.1 uses to authorize Flame.
What’s actually happening
Flame now keeps an encrypted identity DB (idservices.db) and puts the AES key in the user’s gnome-keyring. If that keyring isn’t there, isn’t unlocked, or is on a filesystem that doesn’t do POSIX locks the way Autodesk expects, sign-in dies and you get the firewall story.
Three things keep lining up for us:
-
NFS home directories. Identity state and keyrings on shared homes are a bad fit. Locks and host-bound encrypted DBs written on one box don’t behave on the next one, or after a remount.
-
PCoIP / Teradici sessions. GDM usually starts and unlocks gnome-keyring. A lot of PCoIP PAM stacks capture the password and never really do the session half, so you get a keyring with no secrets. After a reboot the DB is still on disk and the key is gone. Decrypt fails (we’ve been seeing error 3043).
-
Crash leftovers. If Flame or AdskIdentityManager dies, POSIX semaphores can sit in
/dev/shmforever. Next launch hangs on the lock (error 3211). Same thing if you try to “help” by pre-starting Identity Manager — it races Flame’s licensing agent for the SSO mutex and you reproduce the failure.
There’s also a nasty footgun: a default → login pointer in ~/.local/share/keyrings with no login.keyring file. Identity Manager starts in NoUI (Did not find default collection) and PAM won’t create the missing file. Artist sees the same license modal.
What we stopped doing
- Don’t start
AdskIdentityManagerfor the user. - Don’t invent a gnome-keyring collection from SSH. That pops a password dialog on their PCoIP session and hangs.
- Don’t write that
default→loginpointer unlesslogin.keyringactually exists.
What has been working
Keep Autodesk identity state and the gnome-keyring on local disk, not NFS. Make sure PCoIP actually starts/unlocks gnome-keyring. After a crash, clear the leftover IDSDK locks in /dev/shm before the next launch. If the keyring is gone but idservices.db is still there, reset the identity DB and let them sign in once from the desktop.
After that, one clean Flame launch + Autodesk SSO and they’re in.


