Bug 623640

Summary: pklogin_finder and pkcs11_inspect both pass command name to pk_configure
Product: Red Hat Enterprise Linux 5 Reporter: Martin Poole <mpoole>
Component: pam_pkcs11Assignee: Bob Relyea <rrelyea>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.0CC: aakkiang, benl, ckannan, jgalipea, jmagne, lmiksik, moshiro, mpoole, rstrode, syeghiay, tmraz
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
URL: https://www.opensc-project.org/pam_pkcs11/ticket/29
Whiteboard:
Fixed In Version: pam_pkcs11-0.5.3-26.el5 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 586422 Environment:
Last Closed: 2012-02-21 05:59:36 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 786154    

Comment 4 Bob Relyea 2011-03-25 22:09:15 UTC
pam_pkcs11 does not appear to be approved for RHEL5.7. If you can get approval for this component, and all the approvals by Wednesday (I have to have all my stuff in by Thursday, including builds and errata). Otherwise I'll dev+ it for 5.8.

bob

Comment 9 Bob Relyea 2011-06-22 19:10:17 UTC
dev_ack as promised in comment 4.

Comment 11 Asha Akkiangady 2012-01-11 18:50:13 UTC
Verified on a RHEL 5.8 client with pam_pkcs11-0.5.3-25.el5.
Executed pklogin_finder and pkcs11_inspect commands, smart card is recognized successfully and maps to the user,  /var/log/messages does not show entries like "pklogin_finder: argument /usr/bin/pklogin_finder is not supported by this module" or "pkcs11_inspect: argument /usr/bin/pkcs11_inspect is not supported by this module".

Marking the bug verified.

Comment 12 Ray Strode [halfline] 2012-01-13 21:19:35 UTC
Note this fix is a bit too simple and repeats a mistake upstream made in the rhel6 development timeframe.  See 

https://www.opensc-project.org/pam_pkcs11/ticket/29

for what we did for rhel6.

Comment 13 Asha Akkiangady 2012-01-13 21:23:44 UTC
Re-opened this bug as it breaks pam_pkcs11.so argument handling.

Comment 16 Bob Relyea 2012-01-18 22:31:57 UTC
I have patch ready to go once the blocker is set to "+"

Comment 17 Bob Relyea 2012-01-20 17:53:10 UTC
New build complete

Comment 19 Asha Akkiangady 2012-01-24 16:07:07 UTC
Smart card login is successful in graphical and virtual terminal with pam_pkcs11-0.5.3-26.el5. 


Marking the bug verified.

Comment 20 errata-xmlrpc 2012-02-21 05:59:36 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0215.html