Bug 1353284 - [RFE] CAC Reader Redirection should work with pcscd running
Summary: [RFE] CAC Reader Redirection should work with pcscd running
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: RFEs
Version: 3.6.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Martin Tessun
QA Contact:
URL:
Whiteboard:
Depends On: 917867
Blocks: 1521059 CEECIR_RHV43_proposed
TreeView+ depends on / blocked
 
Reported: 2016-07-06 17:38 UTC by Chetan Nagarkar
Modified: 2023-09-07 18:46 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-07-02 12:41:59 UTC
oVirt Team: Spice
Target Upstream Version:
Embargoed:
lsvaty: testing_plan_complete-


Attachments (Terms of Use)

Description Chetan Nagarkar 2016-07-06 17:38:32 UTC
Description of problem:

CAC works through the console when turned off pcscd on the client and select the card reader in the usb items. This is not an option to turn "off" pcscd on the client to make cac auth work.  Customer will have non admin users of the desktops logging in to view consoles of systems. SO smartcard redirection should work with pcscd running.

Comment 1 Michal Skrivanek 2016-07-07 04:55:40 UTC
Not sure if this is an RFE or a bug

Comment 2 David Blechter 2016-07-07 11:31:16 UTC
request to reporter: It is important. Please be sure that all info from the custom case is present in BZ. 
thanks, dnb

Comment 3 David Blechter 2016-07-07 11:42:09 UTC
(In reply to Michal Skrivanek from comment #1)
> Not sure if this is an RFE or a bug

According to the description, it is not even a bug. "USB re-direction" means CAC USB device can't be used on the client. So, NO pcscd!

Comment 5 Frank DeLorey 2016-07-15 13:55:49 UTC
This customer cannot supply us with a full set of logs due to their security policy. Is there some specific commands we should have them run to try to figure why Smartcard sharing is not working? From the info we have gathered they are using a Linux Client with coolkey and pcscd running with Smartcard Sharing enabled to the VM however the VM, also RHEL, does not see the Smartcard unless pcscd is disabled in the client.

Frank

Comment 6 David Blechter 2017-12-07 18:35:23 UTC
It looks like the real problem according to the case is "Missing ActivClient support", so added dependency. It will be helpful if the important info from the case presents in BZ as well.
So, thereal blocker of 1521059 is 917867, and not this BZ

Comment 7 Martin Tessun 2018-07-02 12:41:59 UTC
As stated in comment #6 BZ 917867 is the real issue. Reader redirection does work with pcsd running. So closing this one.


Note You need to log in before you can comment on or make changes to this bug.