[Pcsclite-muscle] Smartcard PAM module load failed after update pcsc-lite from 1.5.2 to 1.7.4 on Redhat6.6

[Zhaohan Ren]

Seems it's a config issue since even I download the pcsc-lite-1.5.2.src.rpm by yumdownloader and run rpmbuild to get the source code, I got the same error.


If I run 'yum remove pcsc-lite' and 'make && make install' mannually, 'service pcscd start' failed due to unknown service name.


Zhaohan

________________________________
From: Pcsclite-muscle <pcsclite-muscle-bounces+renz=vmware.com at lists.alioth.debian.org> on behalf of Zhaohan Ren <renz at vmware.com>
Sent: Friday, August 7, 2015 8:05 PM
To: Talks about MUSCLE
Subject: Re: [Pcsclite-muscle] Smartcard PAM module load failed after update pcsc-lite from 1.5.2 to 1.7.4 on Redhat6.6

Thanks for your quick response!

[root at redhat-66-sc-1 ~]# ldd -r /usr/lib64/pkcs11/libcmP11.so
ldd: warning: you do not have execution permission for `/usr/lib64/pkcs11/libcmP11.so'
        linux-vdso.so.1 =>  (0x00007ffdbebfe000)
        libpcsclite.so.1 => /usr/lib64/libpcsclite.so.1 (0x00007f9fd7496000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f9fd7292000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f9fd7074000)
        libz.so.1 => /lib64/libz.so.1 (0x00007f9fd6e5e000)
        libstdc++.so.6 => /usr/lib64/libstdc++.so.6 (0x00007f9fd6b58000)
        libm.so.6 => /lib64/libm.so.6 (0x00007f9fd68d3000)
        libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f9fd66bd000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f9fd6329000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f9fd849e000)

[root at redhat-66-sc-1 ~]# ls /usr/lib64/libpcsclite.so.1 -l
lrwxrwxrwx. 1 root root 20 Aug  6 22:06 /usr/lib64/libpcsclite.so.1 -> libpcsclite.so.1.0.0

Thanks

From: Pcsclite-muscle [mailto:pcsclite-muscle-bounces+renz=vmware.com at lists.alioth.debian.org] On Behalf Of Ludovic Rousseau
Sent: 2015?8?7? 20:00
To: Talks about MUSCLE
Subject: Re: [Pcsclite-muscle] Smartcard PAM module load failed after update pcsc-lite from 1.5.2 to 1.7.4 on Redhat6.6

2015-08-07 12:28 GMT+02:00 Zhaohan Ren <renz at vmware.com<mailto:renz at vmware.com>>:
Hi

Hi


I configured /etc/pam.d/su on Redhat6.6 64bit to do authentication by PIV smartcard:

vi /etc/pam.d/su
#%PAM-1.0
auth            sufficient      pam_rootok.so
auth            sufficient      pam_pkcs11.so debug


Also I replace the module with vender?s:
vi /etc/pam_pkcs11/pam_pkcs11.conf:
  pkcs11_module coolkey {
    module = /usr/lib64/pkcs11/libcmP11.so;


Everything works well within the original pcsc-lite-1.5.2 until I downloaded and updated pcsc-lite to 1.7.4(https://alioth.debian.org/frs/?group_id=30105#title_pcsclite<https://urldefense.proofpoint.com/v2/url?u=https-3A__alioth.debian.org_frs_-3Fgroup-5Fid-3D30105-23title-5Fpcsclite&d=BQMFaQ&c=Sqcl0Ez6M0X8aeM67LKIiDJAXVeAw-YihVMNtXt-uEs&r=tGtITTN7bN_KCESZjl2NrQ&m=YAq-jpHd10vmybtsMk4yGvfi6rxfUz1P8Elrp_JS8VI&s=oURay6F4B6-sCbyK0ll_tc6SqD5MdJxhzbWczNapJIM&e=>) manually. Below is my steps:
./configure ?prefix=/usr/
make
make install
service pcscd restart

[root at redhat-66-sc-login pcsc-lite-1.7.4]# pcscd -v
pcsc-lite version 1.7.4.
Copyright (C) 1999-2002 by David Corcoran <corcoran at linuxnet.com<mailto:corcoran at linuxnet.com>>.
Copyright (C) 2001-2011 by Ludovic Rousseau <ludovic.rousseau at free.fr<mailto:ludovic.rousseau at free.fr>>.
Copyright (C) 2003-2004 by Damien Sauveron <sauveron at labri.fr<mailto:sauveron at labri.fr>>.
Report bugs to <muscle at lists.musclecard.com<mailto:muscle at lists.musclecard.com>>.
Enabled features: Linux x86_64-unknown-linux-gnu usbdropdir=/usr/lib64/pcsc/drivers ipcdir=/var/run configdir=/etc/



Then I found smartcard PAM authentication always failed:
[renz at redhat-66-sc-login pcsc-lite-1.7.4]$ su
DEBUG:pam_config.c:238: Using config file /etc/pam_pkcs11/pam_pkcs11.conf
DEBUG:pkcs11_lib.c:182: Initializing NSS ...
DEBUG:pkcs11_lib.c:192: Initializing NSS ... database=/etc/pki/nssdb
DEBUG:pkcs11_lib.c:210: ...  NSS Complete
DEBUG:pam_pkcs11.c:272: Is it a screen saver?
DEBUG:pam_pkcs11.c:287: explicit username = [root]
DEBUG:pam_pkcs11.c:315: loading pkcs #11 module...
DEBUG:pkcs11_lib.c:235: Looking up module in list
DEBUG:pkcs11_lib.c:238: modList = 0x4eb443d0 next = 0x0
DEBUG:pkcs11_lib.c:239: dllName= <null>
DEBUG:pkcs11_lib.c:285: loading Module explictly, moduleSpec=<library="/usr/lib64/pkcs11/libcmP11.so" name="SmartCard"> module=/usr/lib64/pkcs11/libcmP11.so
DEBUG:pkcs11_lib.c:289: Failed to load SmartCard software (null)
ERROR:pam_pkcs11.c:318: load_pkcs11_module() failed:

Does anyone have any idea about this issue? Thanks in advance!


What is the result of:
$ ldd -r /usr/lib64/pkcs11/libcmP11.so
Bye

--
 Dr. Ludovic Rousseau
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pcsclite-muscle/attachments/20150807/12124f26/attachment.html>