I been doing a fair bit of playing around with Muscle on Sunrays. :)
You should be aware that there is a bug in Suns libpcsc-srcom.so. This is the library that exports the pcsc interface so you can access the Sunray terminal reader. The bug works like this:
1) Application 1: opens pcsc context, connects to reader, gets card status, prints atr (correct), calls SCardDisconnect (success) then sleeps.
2) Application 2 : (while Application 1 is sleeping) opens pcsc context, connects to reader, gets card status, prints atr (INCORRECT ATR), calls SCardDisconnect (success).
Basically Application 2 cannot access the card while Application 1 process is still running, even though App1 has called SCardDisconnect. Looks like they rely on process exit to clean up resources.
This turns out to be a big problem with pam. Pam instances exists for the life of the session so if your pam module accesses the smartcard no other application can access the card after you have logged in. e.g. Mozilla
The only way around this that I have found is to splice off a thread to perform your card accesses. When thread dies the resources get cleaned up and card is accessable again.
Hope that helps :)
From: Michael Bender <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED], MUSCLE <[email protected]> To: Artur Iwaniuk <[EMAIL PROTECTED]> CC: MUSCLE <[email protected]> Subject: Re: [Muscle] Solaris Sun Ray Date: Wed, 09 Feb 2005 17:07:33 -0800
Hi Artur,
Wow, I think that this is one of the first Sun Ray posts that I have seen on the MUSCLE list! Cool!
i'm very proud ;)
I will send you a certificate (the paper kind) to put up on your wall :-)
Make sure that you have the latest patches for SRSS 2.0, and the latest SUNWsrcbp package. That package provides a PC/SC-lite API for the internal Sun Ray reader. That will get you going at the APDU level. Note a couple of things about Sun Ray:
- No T=1 support in SRSS 2.0, you have to load SRSS 3 since we added T=1 support to the Sun Ray firmware and server-side code in SRSS 3.
is this will cause any disadvantages in work ?
I don't understand the question. If you want to use T=1 cards with Sun Ray's internal reader, you will need the updated SRSS release (firmware + server-side code).
- pcscd doesn't work with Sun Rays yet since it doesn't provide distinct, protected reader channels based on Sun Ray desktop sessions - we're working on mods to pcscd for that as well.
in problem i'v faced, this is less important, i think
Yes, since the SUNWsrcbp package does the right thing for the internal reader.
Other than that, all of the standard MUSCLE stuff such as PAM and PKCS#11 modules work OK on Sun Ray.
well, think it should look like this: 1)SUNWsrcbp - (i'v installed 1.0_09) in fact pcsc library. also, latests
patch for sunray
2)compile opensc. but there i must give path to pcsc-lite. configure
script (pkg-config in fact) says that cannot find libpcsclite.pc file.
which is correct, because this file is in src directory of pcsc-lite
source only. more specyficly - there's no such file in /opt/SUNWsrcbp
there's only shared libs. what about header files, required, i think, in
process of compilation. maybe, there is an SUNWsrcbp-dev package, which
includes all required stuff. or, there is other way for compile opensc, or
opensc is not required at all....
The SUNWsrcbp package only provides APDU-level access (the PC/SC-lite API) via the libpcsclite.so shared library. You don't need a special header file since this is built with the standard winscard.h header file that Dave wrote way back when.
How people have been doing this is to build their application on a system that has the MUSCLE dev environment installed, that can even be a Solaris/Sun Ray system if you install the MUSCLE bits there. Then, just use the libpcsclite.so library that comes from the SUNWsrcbp package as the PC/SC-lite interface, you don't need to use pcscd and all the rest (and you can't use it to talk to the Sun Ray internal reader yet anyway!).
So, it is a bit strange but it all does work :-)
I hope this helps.
mike
-- ---------------------------------------------------------------------------- Michael Bender E-Mail: [EMAIL PROTECTED] Sun Microsystems, Inc. Tel: 831-401-9510 14 Network Circle Tel: x.31807 Menlo Park, Ca. 94025 Mailstop: UMPK14-260 MD: VPN/IMAP
Never give up! Never surrender!
---------------------------------------------------------------------------- _______________________________________________ Muscle mailing list [email protected] http://lists.drizzle.com/mailman/listinfo/muscle
_________________________________________________________________
Don't just search. Find. Check out the new MSN Search! http://search.msn.com/
_______________________________________________ Muscle mailing list [email protected] http://lists.drizzle.com/mailman/listinfo/muscle
