2011/1/28 Tom Jenkinson <[email protected]>:
> Hi,

Hellon

> Using RSA_SecuriD_getpasswd with my Sid800 key on FC14 fails with:
> RSA_SecurID_getpasswd
> cmd3 failed (2): 0000
>
> To help debug this I downloaded the source code from:
> http://svn.debian.org/viewsvn/pcsclite/trunk/Drivers/ccid/contrib/RSA_SecurID/RSA_SecurID_getpasswd.c?revision=2974&view=markup
>
> And compiled it as:
> gcc -I /usr/include/PCSC/ -lpcsclite RSA_SecurID_getpasswd.c
>
> While looking at the source code I noticed that it is not actually cmd3 that
> is failing it is cmd4 (a bug in the source code has the incorrect error
> message for cmd3 and cmd4.
>
> Correcting the output from cmd4 in the case of error from:
>
> printf("cmd3 failed (%ld): %02X%02X\n", length, bRecvBuffer[5],
>                       bRecvBuffer[6]);
>
> To:
> printf("cmd4 failed (%ld): %02X%02X\n", length, bRecvBuffer[0],
>             bRecvBuffer[1]);
>
> Gets:
> cmd4 failed (2): 9736

Fixed in revision 5562.

> Now, my questions are:
> 1. Does anyone know if there are different variants of a SID800 token that
> respond to different ADPUs?

No idea.

> 2. Is there a specification somewhere of the non-ISO ADPU that RSA are using
> so I can change my copy of the code to try to work on my FC14 laptop?

No idea.

> 3. Does anyone know what an error code of 9736 means?

This error code may just be garbage. I corrected in revision 5563 the
way I display the error code.

> 4. Does a SID800 token need somehow configuring to support being accessed
> over USB? Perhaps it is a restriction on the token itself?

No idea.

> Thanks very much for any assistance anyone can offer!
> Tom
>
> PS I believe this does work on FC14 as someone on the group asked for help
> (for a different error code) and seemed to get it working:
> http://archives.neohapsis.com/archives/dev/muscle/2010-q4/0060.html hence
> why I think it could be the token that does not support USB access even
> though it is a SID800...

Maybe you can try the RSA windows application (if available somewhere)
to know if your token is correctly configured.

Good luck.

-- 
 Dr. Ludovic Rousseau

_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to