Denniston, Todd A CIV NAVSURFWARCENDIV Crane wrote:
> Tue Jul 26 21:17:40 UTC 2016, m.roth at 5-cent.us wrote:
>> I could try the reinstall, but it's very odd - everything worked, and
>> now, after the upgrade, it doesn't. Oh, and here's another twist on this:
>> Under 6.7, if I'd logged into my webmail via firefox, and while that was
>> happening, I stuck my AA ("Logical token" card) into the keyboard slot,
>> and used it in logging onto one server (using sccr), it just chugged
>> along. Now, at 6.8, *everything* in firefox hangs - even a google
>> search, until I pull the card out of the keyboard. It's clearly trying to
>> authenticate the client, not just the server....
>
> I think your use of openssh -s libcoolkeypk11.so makes it look like:
> ssh
> coolkey
> pcscd
> ccid
<snip>
Some minor corrections, and more data: as I was typing, before I pulled my
PIV card out of the slot, and a second or two later, firefox crashed, so I
have to retype this....
I was doing ssh -i libcoolkeypk11.so <host> for debugging purposes. What I
used to do was ssh-add -s libcoolkeypk11.so. It would then ask for a PIN,
and add it. Now, it still asks for the PIN, but then announces that it
failed to add it to the agent. From messages, I see
ssh-pkcs11-helper[14669]: error: no slots, which I suspect is suggesting
some weird misconfiguration, because my manager, who originally got the
configuration working, tells me it shouldn't be using that.
Also, for a reader, lsusb shows Dell Computer Corp. SmartCard Reader
Keyboard. More: when I used to insert the card, it would blink a bit,
maybe half a dozen times or so, and then stop. Now, it blinks for longer
(10?15?), then stops... but once I've tried to add the card and it fails,
it starts blinking, and doesn't stop.
mark