Bug 1464253
| Summary: | Token name of CAC cards not displayed correctly | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Roshni <rpattath> |
| Component: | opensc | Assignee: | Jakub Jelen <jjelen> |
| Status: | CLOSED DUPLICATE | QA Contact: | Release Test Team <release-test-team-automation> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 7.4 | CC: | dlyle |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-06-28 14:43:46 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Roshni
2017-06-22 19:49:05 UTC
Hello Roshni.
This behavior is caused by the fact that the card you are using is dual card and is recognized by both PIV and CAC driver. In OpenSC upstream the PIV driver has a priority over the CAC one (unlike in Coolkey) -- CAC is these days quite much abandoned standard. This is change of behavior between packages, but it is not expected that it will be completely drop-in replacement. Also following Upstream behavior is desirable.
You can verify this bug if you configure the drivers in the other order in `/etc/opensc-x86_64.conf` and modify the line containing `card_drivers` to something like this:
card_drivers = cac, piv, coolkey;
If this will resolve the problem, we can probably close this as a duplicate of the bug #1449740 which discuss the labels on the PIV cards.
(In reply to Jakub Jelen from comment #2) > Hello Roshni. > This behavior is caused by the fact that the card you are using is dual card > and is recognized by both PIV and CAC driver. In OpenSC upstream the PIV > driver has a priority over the CAC one (unlike in Coolkey) -- CAC is these > days quite much abandoned standard. This is change of behavior between > packages, but it is not expected that it will be completely drop-in > replacement. Also following Upstream behavior is desirable. > > You can verify this bug if you configure the drivers in the other order in > `/etc/opensc-x86_64.conf` and modify the line containing `card_drivers` to > something like this: > > card_drivers = cac, piv, coolkey; The username can be seen with this config though a bit different from how coolkey lists it 2. CoolKey PKCS #11 Module library name: libcoolkeypk11.so slots: 1 slot attached status: loaded slot: OMNIKEY AG CardMan 3021 00 00 token: LAST.DAY.2001428082 3. opensc module library name: opensc-pkcs11.so slots: 1 slot attached status: loaded slot: OMNIKEY AG CardMan 3021 00 00 token: CAC II (LAST.DAY.2001428082) > > If this will resolve the problem, we can probably close this as a duplicate > of the bug #1449740 which discuss the labels on the PIV cards. Yes. That is expected. The OpenSC is adding a driver identification here. I don't think it is something we should bother with. I added an item to the KBA: https://access.redhat.com/node/3034441/draft Is there anything more to do here? (In reply to Jakub Jelen from comment #4) > Yes. That is expected. The OpenSC is adding a driver identification here. I > don't think it is something we should bother with. > > I added an item to the KBA: > > https://access.redhat.com/node/3034441/draft I do not have permissions to access the above > > Is there anything more to do here? *** This bug has been marked as a duplicate of bug 1449740 *** |