Hi
I configured /etc/pam.d/su on Redhat6.6 64bit to do authentication by PIV
smartcard:
vi /etc/pam.d/su
#%PAM-1.0
auth sufficient pam_rootok.so
auth sufficient pam_pkcs11.so debug
Also I replace the module with vender's:
vi /etc/pam_pkcs11/pam_pkcs11.conf:
pkcs11_module coolkey {
module = /usr/lib64/pkcs11/libcmP11.so;
Everything works well within the original pcsc-lite-1.5.2 until I downloaded
and updated pcsc-lite to
1.7.4(https://alioth.debian.org/frs/?group_id=30105#title_pcsclite) manually.
Below is my steps:
./configure -prefix=/usr/
make
make install
service pcscd restart
[root@redhat-66-sc-login pcsc-lite-1.7.4]# pcscd -v
pcsc-lite version 1.7.4.
Copyright (C) 1999-2002 by David Corcoran <[email protected]>.
Copyright (C) 2001-2011 by Ludovic Rousseau <[email protected]>.
Copyright (C) 2003-2004 by Damien Sauveron <[email protected]>.
Report bugs to <[email protected]>.
Enabled features: Linux x86_64-unknown-linux-gnu
usbdropdir=/usr/lib64/pcsc/drivers ipcdir=/var/run configdir=/etc/
Then I found smartcard PAM authentication always failed:
[renz@redhat-66-sc-login pcsc-lite-1.7.4]$ su
DEBUG:pam_config.c:238: Using config file /etc/pam_pkcs11/pam_pkcs11.conf
DEBUG:pkcs11_lib.c:182: Initializing NSS ...
DEBUG:pkcs11_lib.c:192: Initializing NSS ... database=/etc/pki/nssdb
DEBUG:pkcs11_lib.c:210: ... NSS Complete
DEBUG:pam_pkcs11.c:272: Is it a screen saver?
DEBUG:pam_pkcs11.c:287: explicit username = [root]
DEBUG:pam_pkcs11.c:315: loading pkcs #11 module...
DEBUG:pkcs11_lib.c:235: Looking up module in list
DEBUG:pkcs11_lib.c:238: modList = 0x4eb443d0 next = 0x0
DEBUG:pkcs11_lib.c:239: dllName= <null>
DEBUG:pkcs11_lib.c:285: loading Module explictly,
moduleSpec=<library="/usr/lib64/pkcs11/libcmP11.so" name="SmartCard">
module=/usr/lib64/pkcs11/libcmP11.so
DEBUG:pkcs11_lib.c:289: Failed to load SmartCard software (null)
ERROR:pam_pkcs11.c:318: load_pkcs11_module() failed:
Does anyone have any idea about this issue? Thanks in advance!
Zhaohan
_______________________________________________
Pcsclite-muscle mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pcsclite-muscle
