<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">2015-08-07 12:28 GMT+02:00 Zhaohan Ren <span dir="ltr"><<a href="mailto:renz@vmware.com" target="_blank">renz@vmware.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="#0563C1" vlink="#954F72" lang="ZH-CN">
<div>
<p class="MsoNormal"><span lang="EN-US">Hi</span></p></div></div></blockquote><div><br>Hi<br> <br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div link="#0563C1" vlink="#954F72" lang="ZH-CN"><div><p class="MsoNormal"><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> </span></p>
<p class="MsoNormal"><span lang="EN-US">I configured /etc/pam.d/su on Redhat6.6 64bit to do authentication by PIV smartcard:<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<table style="border-collapse:collapse;border:none" border="1" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="width:431.5pt;border:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt" valign="top" width="575">
<p class="MsoNormal"><span lang="EN-US">vi /etc/pam.d/su<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">#%PAM-1.0<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">auth sufficient pam_rootok.so<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">auth sufficient pam_pkcs11.so debug<u></u><u></u></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Also I replace the module with vender’s:<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">vi /etc/pam_pkcs11/pam_pkcs11.conf:<u></u><u></u></span></p>
<table style="border-collapse:collapse;border:none" border="1" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="width:431.5pt;border:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt" valign="top" width="575">
<p class="MsoNormal"><span lang="EN-US"> pkcs11_module coolkey {<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> module = /usr/lib64/pkcs11/libcmP11.so;<u></u><u></u></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Everything works well within the original pcsc-lite-1.5.2 until I downloaded and updated pcsc-lite to 1.7.4(<a href="https://alioth.debian.org/frs/?group_id=30105#title_pcsclite" target="_blank">https://alioth.debian.org/frs/?group_id=30105#title_pcsclite</a>)
manually. Below is my steps:<u></u><u></u></span></p>
<table style="border-collapse:collapse;border:none" border="1" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="width:431.5pt;border:solid windowtext 1.0pt;padding:0cm 5.4pt 0cm 5.4pt" valign="top" width="575">
<p class="MsoNormal"><span lang="EN-US">./configure –prefix=/usr/<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">make<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">make install<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">service pcscd restart<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">[root@redhat-66-sc-login pcsc-lite-1.7.4]# pcscd -v<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">pcsc-lite version 1.7.4.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Copyright (C) 1999-2002 by David Corcoran <<a href="mailto:corcoran@linuxnet.com" target="_blank">corcoran@linuxnet.com</a>>.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Copyright (C) 2001-2011 by Ludovic Rousseau <<a href="mailto:ludovic.rousseau@free.fr" target="_blank">ludovic.rousseau@free.fr</a>>.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Copyright (C) 2003-2004 by Damien Sauveron <<a href="mailto:sauveron@labri.fr" target="_blank">sauveron@labri.fr</a>>.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Report bugs to <<a href="mailto:muscle@lists.musclecard.com" target="_blank">muscle@lists.musclecard.com</a>>.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Enabled features: Linux x86_64-unknown-linux-gnu usbdropdir=/usr/lib64/pcsc/drivers ipcdir=/var/run configdir=/etc/<u></u><u></u></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Then I found smartcard PAM authentication always failed:<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">[renz@redhat-66-sc-login pcsc-lite-1.7.4]$ su<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pam_config.c:238: Using config file /etc/pam_pkcs11/pam_pkcs11.conf<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pkcs11_lib.c:182: Initializing NSS ...<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pkcs11_lib.c:192: Initializing NSS ... database=/etc/pki/nssdb<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pkcs11_lib.c:210: ... NSS Complete<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pam_pkcs11.c:272: Is it a screen saver?<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pam_pkcs11.c:287: explicit username = [root]<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pam_pkcs11.c:315: loading pkcs #11 module...<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pkcs11_lib.c:235: Looking up module in list<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pkcs11_lib.c:238: modList = 0x4eb443d0 next = 0x0<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pkcs11_lib.c:239: dllName= <null> <u></u>
<u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pkcs11_lib.c:285: loading Module explictly, moduleSpec=<library="/usr/lib64/pkcs11/libcmP11.so" name="SmartCard"> module=/usr/lib64/pkcs11/libcmP11.so<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">DEBUG:pkcs11_lib.c:289: Failed to load SmartCard software (null)<u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="color:red;background:yellow" lang="EN-US">ERROR:pam_pkcs11.c:318: load_pkcs11_module() failed:</span><span style="color:red" lang="EN-US"><u></u><u></u></span></b></p>
<p class="MsoNormal"><b><span style="color:red" lang="EN-US"><u></u> <u></u></span></b></p>
<p class="MsoNormal"><span lang="EN-US">Does anyone have any idea about this issue? Thanks in advance!<span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></span></p><span class="HOEnZb"><font color="#888888">
<p class="MsoNormal"><span lang="EN-US"></span><br clear="all"></p></font></span></div></div></blockquote></div><br></div><div class="gmail_extra">What is the result of:<br></div><div class="gmail_extra">$ ldd -r <span lang="EN-US">/usr/lib64/pkcs11/libcmP11.so<br><br></span></div><div class="gmail_extra"><span lang="EN-US">Bye<br></span></div><div class="gmail_extra"><br></div><div class="gmail_extra">-- <br><div class="gmail_signature"> Dr. Ludovic Rousseau</div>
</div></div>