pam_pkcs11 does not appear to be approved for RHEL5.7. If you can get approval for this component, and all the approvals by Wednesday (I have to have all my stuff in by Thursday, including builds and errata). Otherwise I'll dev+ it for 5.8. bob
dev_ack as promised in comment 4.
Verified on a RHEL 5.8 client with pam_pkcs11-0.5.3-25.el5. Executed pklogin_finder and pkcs11_inspect commands, smart card is recognized successfully and maps to the user, /var/log/messages does not show entries like "pklogin_finder: argument /usr/bin/pklogin_finder is not supported by this module" or "pkcs11_inspect: argument /usr/bin/pkcs11_inspect is not supported by this module". Marking the bug verified.
Note this fix is a bit too simple and repeats a mistake upstream made in the rhel6 development timeframe. See https://www.opensc-project.org/pam_pkcs11/ticket/29 for what we did for rhel6.
Re-opened this bug as it breaks pam_pkcs11.so argument handling.
I have patch ready to go once the blocker is set to "+"
New build complete
Smart card login is successful in graphical and virtual terminal with pam_pkcs11-0.5.3-26.el5. Marking the bug verified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0215.html