On Mon, Oct 06, 2008 at 02:32:49PM -0700, Anthony Scarpino wrote: > Douglas E. Engert wrote: > > > > > > Nicolas Williams wrote: > >> On Mon, Oct 06, 2008 at 01:44:34PM -0700, Anthony Scarpino wrote: > >>>> Note that sc_pkcs11_get_mechanism_list is called with p11card=0x0. > >>>> Ticket #181 gets around this. > >>>> > >>>> I have not tracked down the sshd and login problems yet. > >>>> I am assuming that is related to no mechanism list. > >>> Just a wild stab here.. If metaslot is enabled, it will retrieve a > >>> list of mechanisms from all the providers. You may try disabling > >>> metaslot, 'cryptoadm disable metaslot', to see if that helps.. > > > > Tried that still fails. No messages in syslog either. > > I'd recommend using truss on the application.. For example, something > like 'truss -p <sshd pid> -u libpkcs11:: opensc-pkcs11::'. You may need
truss -p <sshd pid> -u libpkcs11,opensc-pkcs11:: (comma instead of space) > to add a fork option to truss as I'm not exactly sure how sshd does it's > daemon insides.. -- Will Fiveash Sun Microsystems Inc. http://opensolaris.org/os/project/kerberos/
