Hello Everybody,I just wanted to share a small program I wrote for unlocking pin's with your puk. This will *only* work if you use NetID as provider, since they added the C_unlockPIN function to make this possible.
This program is intended to use for those people in our company that's using Linux and locked their cards on business trips or whatever.
So the thinking process around this is, 1. User locks his card, god knows why. (Who enters the pin wrong 5 times=))2. User calls the helpdesk, who tells the user to switch to a free console and login as the "unlock_pin"-user with some password. 3. Since the "unlock-pin"-user has this program as default shell, the user (who locked his card) will now be prompted with this program, and thus have the ability to unlock their card with the puk.
I would love to see this possibility (as i previously mentioned on the list) available in gdm (screensaver/login/whatever), however since there is no way of unlocking pins in pkcs11-standard (due to the security aspect, if i understood it correctly), I understand that this will not happen. However, we need a way of handling locked cards, therefore this program.
Anyway, for anyone that uses NetID as provider and needs this functionality, feel free to use it, and contact me if any question arise. Things to handle better is the possibility to have multiple readers, and usage of different slots. This program only use the first reader available and slot=1.
Any comments, suggestions, improvements, thoughts around this method, are welcome. (Go easy on the coding-part since I'm not a programmer)
/Patrik Martinsson, Sweden.
pin_unlock.tar.gz
Description: GNU Zip compressed data
_______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel