[Pcsclite-muscle] Smartcard PAM module load failed after update pcsc-lite from 1.5.2 to 1.7.4 on Redhat6.6
Zhaohan Ren
renz
Fri Aug 7 03:28:45 PDT 2015
Hi
I configured /etc/pam.d/su on Redhat6.6 64bit to do authentication by PIV smartcard:
vi /etc/pam.d/su
#%PAM-1.0
auth sufficient pam_rootok.so
auth sufficient pam_pkcs11.so debug
Also I replace the module with vender's:
vi /etc/pam_pkcs11/pam_pkcs11.conf:
pkcs11_module coolkey {
module = /usr/lib64/pkcs11/libcmP11.so;
Everything works well within the original pcsc-lite-1.5.2 until I downloaded and updated pcsc-lite to 1.7.4(https://alioth.debian.org/frs/?group_id=30105#title_pcsclite) manually. Below is my steps:
./configure -prefix=/usr/
make
make install
service pcscd restart
[root at redhat-66-sc-login pcsc-lite-1.7.4]# pcscd -v
pcsc-lite version 1.7.4.
Copyright (C) 1999-2002 by David Corcoran <corcoran at linuxnet.com>.
Copyright (C) 2001-2011 by Ludovic Rousseau <ludovic.rousseau at free.fr>.
Copyright (C) 2003-2004 by Damien Sauveron <sauveron at labri.fr>.
Report bugs to <muscle at lists.musclecard.com>.
Enabled features: Linux x86_64-unknown-linux-gnu usbdropdir=/usr/lib64/pcsc/drivers ipcdir=/var/run configdir=/etc/
Then I found smartcard PAM authentication always failed:
[renz at redhat-66-sc-login pcsc-lite-1.7.4]$ su
DEBUG:pam_config.c:238: Using config file /etc/pam_pkcs11/pam_pkcs11.conf
DEBUG:pkcs11_lib.c:182: Initializing NSS ...
DEBUG:pkcs11_lib.c:192: Initializing NSS ... database=/etc/pki/nssdb
DEBUG:pkcs11_lib.c:210: ... NSS Complete
DEBUG:pam_pkcs11.c:272: Is it a screen saver?
DEBUG:pam_pkcs11.c:287: explicit username = [root]
DEBUG:pam_pkcs11.c:315: loading pkcs #11 module...
DEBUG:pkcs11_lib.c:235: Looking up module in list
DEBUG:pkcs11_lib.c:238: modList = 0x4eb443d0 next = 0x0
DEBUG:pkcs11_lib.c:239: dllName= <null>
DEBUG:pkcs11_lib.c:285: loading Module explictly, moduleSpec=<library="/usr/lib64/pkcs11/libcmP11.so" name="SmartCard"> module=/usr/lib64/pkcs11/libcmP11.so
DEBUG:pkcs11_lib.c:289: Failed to load SmartCard software (null)
ERROR:pam_pkcs11.c:318: load_pkcs11_module() failed:
Does anyone have any idea about this issue? Thanks in advance!
Zhaohan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pcsclite-muscle/attachments/20150807/79a0708a/attachment.html>
More information about the pcsclite-muscle
mailing list