<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=big5">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} @font-face
{font-family:\5B8B \4F53 }
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:\5B8B \4F53 }
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle18
{font-family:"Calibri",sans-serif;
color:#1F497D}
.MsoChpDefault
{font-family:"Calibri",sans-serif}
@page WordSection1
{margin:72.0pt 90.0pt 72.0pt 90.0pt}--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Seems it's a config issue since even I download the pcsc-lite-1.5.2.src.rpm by yumdownloader and run rpmbuild to get the source code, I got the same error.</p>
<p><br>
</p>
<p>If I run 'yum remove pcsc-lite' and 'make && make install' mannually, 'service pcscd start' failed due to unknown service name.</p>
<p><br>
</p>
<p>Zhaohan <br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Pcsclite-muscle <pcsclite-muscle-bounces+renz=vmware.com@lists.alioth.debian.org> on behalf of Zhaohan Ren <renz@vmware.com><br>
<b>Sent:</b> Friday, August 7, 2015 8:05 PM<br>
<b>To:</b> Talks about MUSCLE<br>
<b>Subject:</b> Re: [Pcsclite-muscle] Smartcard PAM module load failed after update pcsc-lite from 1.5.2 to 1.7.4 on Redhat6.6</font>
<div> </div>
</div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US">Thanks for your quick response!</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US">[root@redhat-66-sc-1 ~]# ldd -r /usr/lib64/pkcs11/libcmP11.so</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US">ldd: warning: you do not have execution permission for `/usr/lib64/pkcs11/libcmP11.so'</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> linux-vdso.so.1 => (0x00007ffdbebfe000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> libpcsclite.so.1 => /usr/lib64/libpcsclite.so.1 (0x00007f9fd7496000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> libdl.so.2 => /lib64/libdl.so.2 (0x00007f9fd7292000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f9fd7074000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> libz.so.1 => /lib64/libz.so.1 (0x00007f9fd6e5e000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> libstdc++.so.6 => /usr/lib64/libstdc++.so.6 (0x00007f9fd6b58000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> libm.so.6 => /lib64/libm.so.6 (0x00007f9fd68d3000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f9fd66bd000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> libc.so.6 => /lib64/libc.so.6 (0x00007f9fd6329000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> /lib64/ld-linux-x86-64.so.2 (0x00007f9fd849e000)</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US">[root@redhat-66-sc-1 ~]# ls /usr/lib64/libpcsclite.so.1 -l
</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US">lrwxrwxrwx. 1 root root 20 Aug 6 22:06 /usr/lib64/libpcsclite.so.1 -> libpcsclite.so.1.0.0</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US">Thanks</span></p>
<p class="MsoNormal"><span style="font-size:10.5pt; font-family:"Calibri",sans-serif; color:#1F497D" lang="EN-US"> </span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif" lang="EN-US">From:</span></b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif" lang="EN-US"> Pcsclite-muscle [mailto:pcsclite-muscle-bounces+renz=vmware.com@lists.alioth.debian.org]
<b>On Behalf Of </b>Ludovic Rousseau<br>
<b>Sent:</b> 2015</span><span style="font-size:11.0pt">¦~</span><span style="font-size:11.0pt; font-family:"Calibri",sans-serif" lang="EN-US">8</span><span style="font-size:11.0pt">¤ë</span><span style="font-size:11.0pt; font-family:"Calibri",sans-serif" lang="EN-US">7</span><span style="font-size:11.0pt">¤é</span><span style="font-size:11.0pt; font-family:"Calibri",sans-serif" lang="EN-US">
20:00<br>
<b>To:</b> Talks about MUSCLE<br>
<b>Subject:</b> Re: [Pcsclite-muscle] Smartcard PAM module load failed after update pcsc-lite from 1.5.2 to 1.7.4 on Redhat6.6</span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US">2015-08-07 12:28 GMT+02:00 Zhaohan Ren <<a href="mailto:renz@vmware.com" target="_blank">renz@vmware.com</a>>:</span></p>
<blockquote style="border:none; border-left:solid #CCCCCC 1.0pt; padding:0cm 0cm 0cm 6.0pt; margin-left:4.8pt; margin-right:0cm">
<div>
<div>
<p class="MsoNormal" style=""><span lang="EN-US">Hi</span></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><span lang="EN-US"><br>
Hi<br>
</span></p>
</div>
<blockquote style="border:none; border-left:solid #CCCCCC 1.0pt; padding:0cm 0cm 0cm 6.0pt; margin-left:4.8pt; margin-right:0cm">
<div>
<div>
<p class="MsoNormal" style=""><span lang="EN-US"> </span></p>
<p class="MsoNormal" style=""><span lang="EN-US">I configured /etc/pam.d/su on Redhat6.6 64bit to do authentication by PIV smartcard:</span></p>
<p class="MsoNormal" style=""><span lang="EN-US"> </span></p>
<table class="MsoNormalTable" style="border-collapse:collapse" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="width:431.5pt; border:solid windowtext 1.0pt; padding:0cm 5.4pt 0cm 5.4pt" valign="top" width="575">
<p class="MsoNormal" style=""><span lang="EN-US">vi /etc/pam.d/su</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">#%PAM-1.0</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">auth sufficient pam_rootok.so</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">auth sufficient pam_pkcs11.so debug</span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style=""><span lang="EN-US"> </span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Also I replace the module with vender¡¦s:</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">vi /etc/pam_pkcs11/pam_pkcs11.conf:</span></p>
<table class="MsoNormalTable" style="border-collapse:collapse" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="width:431.5pt; border:solid windowtext 1.0pt; padding:0cm 5.4pt 0cm 5.4pt" valign="top" width="575">
<p class="MsoNormal" style=""><span lang="EN-US"> pkcs11_module coolkey {</span></p>
<p class="MsoNormal" style=""><span lang="EN-US"> module = /usr/lib64/pkcs11/libcmP11.so;</span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style=""><span lang="EN-US"> </span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Everything works well within the original pcsc-lite-1.5.2 until I downloaded and updated pcsc-lite to 1.7.4(<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__alioth.debian.org_frs_-3Fgroup-5Fid-3D30105-23title-5Fpcsclite&d=BQMFaQ&c=Sqcl0Ez6M0X8aeM67LKIiDJAXVeAw-YihVMNtXt-uEs&r=tGtITTN7bN_KCESZjl2NrQ&m=YAq-jpHd10vmybtsMk4yGvfi6rxfUz1P8Elrp_JS8VI&s=oURay6F4B6-sCbyK0ll_tc6SqD5MdJxhzbWczNapJIM&e=" target="_blank">https://alioth.debian.org/frs/?group_id=30105#title_pcsclite</a>)
manually. Below is my steps:</span></p>
<table class="MsoNormalTable" style="border-collapse:collapse" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="width:431.5pt; border:solid windowtext 1.0pt; padding:0cm 5.4pt 0cm 5.4pt" valign="top" width="575">
<p class="MsoNormal" style=""><span lang="EN-US">./configure ¡Vprefix=/usr/</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">make</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">make install</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">service pcscd restart</span></p>
<p class="MsoNormal" style=""><span lang="EN-US"> </span></p>
<p class="MsoNormal" style=""><span lang="EN-US">[root@redhat-66-sc-login pcsc-lite-1.7.4]# pcscd -v</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">pcsc-lite version 1.7.4.</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Copyright (C) 1999-2002 by David Corcoran <<a href="mailto:corcoran@linuxnet.com" target="_blank">corcoran@linuxnet.com</a>>.</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Copyright (C) 2001-2011 by Ludovic Rousseau <<a href="mailto:ludovic.rousseau@free.fr" target="_blank">ludovic.rousseau@free.fr</a>>.</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Copyright (C) 2003-2004 by Damien Sauveron <<a href="mailto:sauveron@labri.fr" target="_blank">sauveron@labri.fr</a>>.</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Report bugs to <<a href="mailto:muscle@lists.musclecard.com" target="_blank">muscle@lists.musclecard.com</a>>.</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Enabled features: Linux x86_64-unknown-linux-gnu usbdropdir=/usr/lib64/pcsc/drivers ipcdir=/var/run configdir=/etc/</span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style=""><span lang="EN-US"> </span></p>
<p class="MsoNormal" style=""><span lang="EN-US"> </span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Then I found smartcard PAM authentication always failed:</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">[renz@redhat-66-sc-login pcsc-lite-1.7.4]$ su</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pam_config.c:238: Using config file /etc/pam_pkcs11/pam_pkcs11.conf</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pkcs11_lib.c:182: Initializing NSS ...</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pkcs11_lib.c:192: Initializing NSS ... database=/etc/pki/nssdb</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pkcs11_lib.c:210: ... NSS Complete</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pam_pkcs11.c:272: Is it a screen saver?</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pam_pkcs11.c:287: explicit username = [root]</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pam_pkcs11.c:315: loading pkcs #11 module...</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pkcs11_lib.c:235: Looking up module in list</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pkcs11_lib.c:238: modList = 0x4eb443d0 next = 0x0</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pkcs11_lib.c:239: dllName= <null>
</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pkcs11_lib.c:285: loading Module explictly, moduleSpec=<library="/usr/lib64/pkcs11/libcmP11.so" name="SmartCard"> module=/usr/lib64/pkcs11/libcmP11.so</span></p>
<p class="MsoNormal" style=""><span lang="EN-US">DEBUG:pkcs11_lib.c:289: Failed to load SmartCard software (null)</span></p>
<p class="MsoNormal" style=""><b><span style="color:red; background:yellow" lang="EN-US">ERROR:pam_pkcs11.c:318: load_pkcs11_module() failed:</span></b><span lang="EN-US"></span></p>
<p class="MsoNormal" style=""><b><span style="color:red" lang="EN-US"> </span></b><span lang="EN-US"></span></p>
<p class="MsoNormal" style=""><span lang="EN-US">Does anyone have any idea about this issue? Thanks in advance!</span></p>
<p class="MsoNormal" style=""><span style="color:#888888" lang="EN-US"><br clear="all">
</span></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US">What is the result of:</span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US">$ ldd -r /usr/lib64/pkcs11/libcmP11.so</span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US">Bye</span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US">-- </span></p>
<div>
<p class="MsoNormal"><span lang="EN-US"> Dr. Ludovic Rousseau</span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>