On Thu, Sep 20, 2007 at 04:15:28PM -0400, jef e wrote:
> Hi again - still poking at our Redhat 5 installation here and running 
> across an error with pcscd. If I disable this daemon, I get the following 
> error during the initial invocation of sudo (when the password is 
> required). It does not happen to subsequent sudo events during the cache 
> period.
>
>  winscard_clnt.c:320:SCardEstablishContextTH() Cannot open public shared 
> file: /var/run/pcscd.pub
>
> I can't seem to find where the system is making the check for this. We're 
> using kerberos for our authentication, and ldap for authorization, and have 
> SELinux enabled. I've poked around PAM, etc - and even Google turns up 
> nothing helpful (other than 2 Ubuntu-related items, one of which says to 
> remove some packages).
>
> I could just leave the daemon running, but it's going to be a server that 
> will never have a need for this daemon.
>
> Any thoughts?

The chain of packages which produces this message is most likely
pam_krb5 -> libkrb5 -> pkinit-nss -> nss -> coolkey -> pcsc-lite.

If you want to quiet that message without running pcscd (break that
chain), the simplest way is to remove either the pkinit-nss or coolkey
package, because those packages provide plugins rather than direct
library dependencies.

Cheers,

Nalin

_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to