[Pcsclite-muscle] Smartcard PAM module load failed after update pcsc-lite from 1.5.2 to 1.7.4 on Redhat6.6

[Ludovic Rousseau]

2015-08-07 12:28 GMT+02:00 Zhaohan Ren <renz at vmware.com>:

> Hi
>

Hi


>
>
> I configured /etc/pam.d/su on Redhat6.6 64bit to do authentication by PIV
> smartcard:
>
>
>
> vi /etc/pam.d/su
>
> #%PAM-1.0
>
> auth            sufficient      pam_rootok.so
>
> auth            sufficient      pam_pkcs11.so debug
>
>
>
> Also I replace the module with vender’s:
>
> vi /etc/pam_pkcs11/pam_pkcs11.conf:
>
>   pkcs11_module coolkey {
>
>     module = /usr/lib64/pkcs11/libcmP11.so;
>
>
>
> Everything works well within the original pcsc-lite-1.5.2 until I
> downloaded and updated pcsc-lite to 1.7.4(
> https://alioth.debian.org/frs/?group_id=30105#title_pcsclite) manually.
> Below is my steps:
>
> ./configure –prefix=/usr/
>
> make
>
> make install
>
> service pcscd restart
>
>
>
> [root at redhat-66-sc-login pcsc-lite-1.7.4]# pcscd -v
>
> pcsc-lite version 1.7.4.
>
> Copyright (C) 1999-2002 by David Corcoran <corcoran at linuxnet.com>.
>
> Copyright (C) 2001-2011 by Ludovic Rousseau <ludovic.rousseau at free.fr>.
>
> Copyright (C) 2003-2004 by Damien Sauveron <sauveron at labri.fr>.
>
> Report bugs to <muscle at lists.musclecard.com>.
>
> Enabled features: Linux x86_64-unknown-linux-gnu
> usbdropdir=/usr/lib64/pcsc/drivers ipcdir=/var/run configdir=/etc/
>
>
>
>
>
> Then I found smartcard PAM authentication always failed:
>
> [renz at redhat-66-sc-login pcsc-lite-1.7.4]$ su
>
> DEBUG:pam_config.c:238: Using config file /etc/pam_pkcs11/pam_pkcs11.conf
>
> DEBUG:pkcs11_lib.c:182: Initializing NSS ...
>
> DEBUG:pkcs11_lib.c:192: Initializing NSS ... database=/etc/pki/nssdb
>
> DEBUG:pkcs11_lib.c:210: ...  NSS Complete
>
> DEBUG:pam_pkcs11.c:272: Is it a screen saver?
>
> DEBUG:pam_pkcs11.c:287: explicit username = [root]
>
> DEBUG:pam_pkcs11.c:315: loading pkcs #11 module...
>
> DEBUG:pkcs11_lib.c:235: Looking up module in list
>
> DEBUG:pkcs11_lib.c:238: modList = 0x4eb443d0 next = 0x0
>
> DEBUG:pkcs11_lib.c:239: dllName= <null>
>
> DEBUG:pkcs11_lib.c:285: loading Module explictly,
> moduleSpec=<library="/usr/lib64/pkcs11/libcmP11.so" name="SmartCard">
> module=/usr/lib64/pkcs11/libcmP11.so
>
> DEBUG:pkcs11_lib.c:289: Failed to load SmartCard software (null)
>
> *ERROR:pam_pkcs11.c:318: load_pkcs11_module() failed:*
>
>
>
> Does anyone have any idea about this issue? Thanks in advance!
>
>
>
What is the result of:
$ ldd -r /usr/lib64/pkcs11/libcmP11.so

Bye

-- 
 Dr. Ludovic Rousseau
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pcsclite-muscle/attachments/20150807/cad36d0e/attachment.html>