Bug 616249
| Summary: | gdm crashes when using a formatted(blank) smartcard at the gdm greeter login screen. | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Chandrasekar Kannan <ckannan> |
| Component: | pam_pkcs11 | Assignee: | Bob Relyea <rrelyea> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Chandrasekar Kannan <ckannan> |
| Severity: | medium | Docs Contact: | |
| Priority: | low | ||
| Version: | 6.0 | CC: | aakkiang, benl, ddumas, jmagne |
| Target Milestone: | rc | Keywords: | RHELNAK |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2010-11-11 16:21:22 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Chandrasekar Kannan
2010-07-19 22:20:31 UTC
This issue has been proposed when we are only considering blocker issues in the current Red Hat Enterprise Linux release. ** If you would still like this issue considered for the current release, ask your support representative to file as a blocker on your behalf. Otherwise ask that it be considered for the next Red Hat Enterprise Linux release. ** That crash is actually in pam_pkcs11.so #5 <signal handler called> #6 0x00ddee82 in pam_sm_authenticate () from /lib/security/pam_pkcs11.so #7 0x030b341f in ?? () from /lib/libpam.so.0 Any chance you could install pam_pkcs11-debuginfo and pam-debuginfo and reproduce? here it is with pam_pkcs11-debuginfo and pam-debuginfo - http://pastebin.test.redhat.com/26853 I believe I have build which should fix this problem here: http: I believe I have build which should fix this problem here: http://10.14.54.172/pam_pkcs11-0.6.2-8.el6_bob.x86_64.rpm http://10.14.54.172/pam_pkcs11-debuginfo-0.6.2-8.el6_bob.x86_64.rpm I've smoked tested the patch to make sure it doesn't break anything. I do not have the setup to test the original bug (which is why I posted test builds). Official RHEL-6 builds are available now: http://brewweb.devel.redhat.com/brew/taskinfo?taskID=2649877 pam_pkcs11-0.6.2-8.el6 Just for fun, I tried out the new package on my older snapshot and it did stop the crashes when inserting a formatted token. Tested following with Gemalto 64K smart card with omnikey 3121 cardman reader: 1. Format smart card using ESC. 2. Rhel 6 is enabled with smartcard login. logout or reboot 3. On the gdm greeter login screen. insert this blank card. 4. click on "Smartcard Authentication". 5. Greeter menu throws error message "Insufficient credential to access authentication data". 6. /var/log/messages has "gdm-smartcard[2257]: no valid certificate which meets all requirements found". gdm doesn't crash. [root@dhcp231-173 ~]# rpm -q esc ccid pcsc-lite pcsc-lite-libs coolkey gdm gnome-screensaver gnome-settings-daemon esc-1.1.0-21.el6.i686 ccid-1.3.9-3.el6.i686 pcsc-lite-1.5.2-6.el6.i686 pcsc-lite-libs-1.5.2-6.el6.i686 coolkey-1.1.0-16.el6.i686 gdm-2.30.4-20.el6.i686 gnome-screensaver-2.28.3-8.el6.i686 gnome-settings-daemon-2.28.2-11.el6.i686 Marking bug verified. Red Hat Enterprise Linux 6.0 is now available and should resolve the problem described in this bug report. This report is therefore being closed with a resolution of CURRENTRELEASE. You may reopen this bug report if the solution does not work for you. |