Re: GPG2 can't read smartcard

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Oct 27, 2016 at 4:42 PM, Corey Sheldon
<sheldon.corey@xxxxxxxxxxxxxxx> wrote:
>
>
> On 10/27/2016 02:20 AM, Laverne Schrock wrote:
>> Hi,
>>
>> I have several Fedora 24 boxes, all of which have
>> /home from NFS. Some of these boxes were fresh
>> installs and some are upgrades from 23 (some of
>> which were fresh installs, and some of which were
>> probably upgrades from 22, etc).
>>
>> On the fresh installs, running `gpg2 --card-status`
>> prints out the card info. On the upgraded boxes,
>> running the same command gives
>>
>> gpg: selecting openpgp failed: No such device
>> gpg: OpenPGP card not available: No such device
>>
>> On both boxes, `rpm -qa | grep gnupg | sort` gives
>>
>> gnupg-1.4.21-1.fc24.x86_64
>> gnupg2-2.1.13-2.fc24.x86_64
>> gnupg2-smime-2.1.13-2.fc24.x86_64
>>
>> On both boxes, `rpm -qa | grep pcsc` gives
>>
>> pcsc-lite-1.8.17-2.fc24.x86_64
>> pcsc-lite-ccid-1.4.23-1.fc24.x86_64
>> pcsc-lite-libs-1.8.17-2.fc24.x86_64
>>
>> On both boxes, `ps ax -o user,stat,command | grep scd` gives
>>
>> root     Ssl  /usr/sbin/pcscd --foreground --auto-exit
>> schr1230 SLl  scdaemon --multi-server
>>
>> On the fresh boxes, the pcscd process sometimes
>> dies, but it comes right back when I run `gpg2 --card-status`
>> again. It doesn't seem to die on the old (non-working) boxes.
>>
>> I've checked dmesg and the device is being detected. It
>> is a Yubikey Neo. On the upgraded machines, when I log
>> out after trying this (or even just Ctrl-Alt-F1 to gdm) there
>> is a popup that says
>>
>> Authentication is required to access the smartcard.
>> Administrator
>> Password: <box for pw here>
>>
>> Entering the password has no effect.
>>
>> Any idea on what might be different on these older systems
>> that prevent this from working?
>>
>> Thanks,
>> Laverne Schrock
>> _______________________________________________
>> users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
>> To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
> At this point:
>
> Authentication is required to access the smartcard.
> Administrator
> Password: <box for pw here>
>
> what admin password are you using the local system admin password or the
> smartcard admin password ( which on MOST smartcards, assuming no
> `unblock pin` has been run is 123456
>

I was trying the local root password. It didn't occur
to me to try using the admin PIN. I'll try that next
time I'm able to reproduce the prompt (turns out
it is a little intermittent). That said, one really
*shouldn't* need the admin pin for everyday tasks.
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux