[Bug 580144] New: openct: ownership mismatch between openct,conf and HAL - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 731568] sed: free(): invalid...

[Bug 580144] New: openct: ownership mismatch between openct,conf and HAL

older
[Bug 832659] New:...

bugzilla_noreply＠novell.com

16 Feb 2010 16 Feb '10

11:17

http://bugzilla.novell.com/show_bug.cgi?id=580144 http://bugzilla.novell.com/show_bug.cgi?id=580144#c0 Summary: openct: ownership mismatch between openct,conf and HAL Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: Other OS/Version: openSUSE 11.2 Status: NEW Severity: Major Priority: P5 - None Component: Hotplug AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: hwit@a-domani.nl QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.1.7) Gecko/20100106 Ubuntu/9.10 (karmic) Firefox/3.5.7 Prior to 11.0 (eg: 10.3) the (relevant top) lines from /etc/openct.conf read: # Path to ifdhandler ifdhandler = /usr/sbin/ifdhandler; Since 11.0 (and still in 11.2) this has been changed into: ifdhandler { program = /usr/sbin/ifdhandler ; # # Safe to disable force_poll: # >=linux-2.6.27.14 # >=linux-2.6.28.3 # force_poll = 1; user = scard; groups = { scard, }; }; When plugging in an etoken (smartcard + usb-reader) one gets the error in syslog: Feb 11 14:04:15 wt8510w ifdhandler[7409]: Unable to open USB device /dev/bus/usb/007/005: Permission denied Feb 11 14:04:15 wt8510w ifdhandler[7409]: usb:/dev/bus/usb/007/005: initialization failed (driver etoken64) Feb 11 14:04:15 wt8510w ifdhandler[7409]: unable to open reader etoken64 usb /dev/bus/usb/007/005 Reason for this is, that in the corresponding HAL-file, permissions are not set: In /usr/lib/hal/hald-addon-openct are the corresponding two lines (19,20) still in comment. Reproducible: Always Steps to Reproduce: 1. Insert etoken (aladdin, or omnikey) 2. issue any opensc commands, like cardos-info 3. watch syslog Actual Results: Unable to open USB device /dev/bus/usb/007/005: Permission denied usb:/dev/bus/usb/007/005: initialization failed (driver etoken64) unable to open reader etoken64 usb /dev/bus/usb/007/005 1) either DO NOT SET the owner in /etc/openct.conf (putting the line in #comment solves the problem) 2) or uncomment lines 19,20 in /usr/lib/hal/hald-addon-openct (chmod and chown) that works as well. 3) Andreas Jellinghaus (from opensc) strongly recommends a upgrade to the latest version: default 0.6.17-3.1, on the OBS is 0.16.17-21.3 available, while openct 0.6.20 has been released. I've raised severity to "major", as security-tokens don't work any more without either change (1 or 2) above. (as said, in 10.3, the user was NOT set) For current versions (11.0 / 11.2) a security patch should be not that difficult, ether a new /etc/openct.conf or /usr/lib/hal/hald-addon-openct I understand that for the upcoming 11.3 the use of "hal" is depreciated... -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

18 Feb 18 Feb

08:08

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

http://bugzilla.novell.com/show_bug.cgi?id=580144 http://bugzilla.novell.com/show_bug.cgi?id=580144#c Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@novell.com AssignedTo|bnc-team-screening@forge.pr |sbrabec@novell.com |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

8 Sep 8 Sep

16:04

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c1 Peter Keller changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |pkeller@globalphasing.com AssignedTo|sbrabec@novell.com |bnc-team-screening@forge.pr | |ovo.novell.com --- Comment #1 from Peter Keller 2010-09-08 16:04:31 UTC --- This is still broken in 11.3, which means that these devices do not work out of the box as they used to. This makes this problem an openSUSE regression that should be fixed (and as the OP has pointed out the fix is trivial). One minor point is that doing 'chmod o-r' on the device means that the device doesn't show up in the output of 'lsusb' for ordinary users. The source of the file /usr/lib/hal/hald-addon-openct in the OpenSC distribution is the template file etc/openct.hald.in As far as I can see hal rather than DeviceKit is still being used for this in 11.3 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:07

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c Peter Keller changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Hotplug |Hotplug Product|openSUSE 11.2 |openSUSE 11.3 OS/Version|openSUSE 11.2 |openSUSE 11.3 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

7 Feb 7 Feb

20:35

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c3 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|kernel-maintainers@forge.pr |sbrabec@novell.com |ovo.novell.com | --- Comment #3 from Jeff Mahoney 2011-02-07 20:35:32 UTC --- This isn't a kernel issue. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17 Feb 17 Feb

16:21

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c4 --- Comment #4 from Peter Keller 2011-02-17 16:21:04 UTC --- If by that, you mean that it has been assigned to the wrong component and/or has the wrong assignee, why not change it? I doubt that the OP would mind, especially if it increases the chances of this bug being eventually fixed. I think that these corrections are best made by Novell insiders :-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:12

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c5 Stanislav Brabec changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Status|NEW |ASSIGNED --- Comment #5 from Stanislav Brabec 2011-02-17 18:12:39 CET --- How it works in openSUSE 11.4 or older 11.x with packages from security:chipcard OBS project? openct infrastructure changed there a lot, and it migrated to udev. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

18 Feb 18 Feb

10:59

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c6 --- Comment #6 from Peter Keller 2011-02-18 10:59:40 UTC --- Thanks for the pointer - I can see that openct in security:chipcard is now at 0.6.20. I don't have the time right now to try this out, but I will certainly give it a go with 11.4 and report back, hopefully before the official release :-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

21 Feb 21 Feb

15:51

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c7 --- Comment #7 from Peter Keller 2011-02-21 15:51:45 UTC --- A colleague has made an installation of 11.4-RC1, so I piggy-backed on this to try this out with a Rainbow iKey3000. I installed the following packages (these are the ones that are required on 11.3): libpcsclite1 pcsc-openct pkcs11-helper pcsc-lite libopensc2 libpkcs11-helper1 opensc libopenct1 openct engine_pkcs11 openct-devel dmesg was OK: [ 1550.113980] usb 3-1: new low speed USB device using uhci_hcd and address 6 [ 1550.268007] usb 3-1: New USB device found, idVendor=04b9, idProduct=1300 [ 1550.268011] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1550.268014] usb 3-1: Product: iKey 3000 Series Token lsusb worked (even as a normal user - good!): Bus 003 Device 006: ID 04b9:1300 Rainbow Technologies, Inc. iKey 3000 Token but "openct-tool list" and "opensc-tool -l" both gave nothing. /var/log/messages contained this: Feb 21 15:04:51 bijvoet kernel: [ 1550.113980] usb 3-1: new low speed USB device using uhci_hcd and address 6 Feb 21 15:04:51 bijvoet kernel: [ 1550.268007] usb 3-1: New USB device found, idVendor=04b9, idProduct=1300 Feb 21 15:04:51 bijvoet kernel: [ 1550.268011] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 Feb 21 15:04:51 bijvoet kernel: [ 1550.268014] usb 3-1: Product: iKey 3000 Series Token Feb 21 15:04:51 bijvoet mtp-probe: checking bus 3, device 6: "/sys/devices/pci0000:00/0000:00:1a.0/usb3/3-1" Feb 21 15:04:51 bijvoet mtp-probe: bus: 3, device: 6 was not an MTP device Feb 21 15:04:52 bijvoet pcscd: dyn_unix.c:81:DYN_GetAddress() IFDHCreateChannelByName: /usr/lib64/readers/openct-ifd.bundle/Contents/Linux/openct-ifd.so: undefined symbol: IFDHCreateChannelByName Feb 21 15:04:52 bijvoet pcscd: readerfactory.c:962:RFInitializeReader() Open Port 0x200000 Failed (usb:04b9/1300:libusb-1.0:3:6) Feb 21 15:04:52 bijvoet pcscd: readerfactory.c:273:RFAddReader() Rainbow iKey 3000 init failed. Feb 21 15:04:52 bijvoet pcscd: utils.c:95:CheckForOpenCT() Remove OpenCT and try again I then tried installing the libchipcard package, but this made no difference. Is this still genuine breakage, or are further packages required? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15:52

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c Peter Keller changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Hotplug |Hotplug Version|Final |RC 1 AssignedTo|sbrabec@novell.com |bnc-team-screening@forge.pr | |ovo.novell.com Product|openSUSE 11.3 |openSUSE 11.4 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22 Mar 22 Mar

15:42

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c8 --- Comment #8 from Peter Keller 2011-03-22 15:42:25 UTC --- After more investigation it would seem: (1) The migration of OpenCT to udev was not done properly. It will never work out-of-the box in the state in which openSUSE now distribute it. (2) OpenCT seems to be deprecated anyway (in openSUSE 11.4 OpenSC is compiled without OpenCT support; openSSH can no longer use engine_pkcs11 to communicate with OpenCT). Someone should make a decision about whether to fix OpenCT or drop it from the distro entirely. I will try to open a new request for this for a more appropriate component. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

23 Mar 23 Mar

10:17

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c9 --- Comment #9 from Peter Keller 2011-03-23 10:17:26 UTC --- New rant: bug 681680 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

24 Jun 24 Jun

03:15

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c zj jia changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zjjia@novell.com AssignedTo|bnc-team-screening@forge.pr |sbrabec@novell.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

7 Nov 7 Nov

20:16

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

https://bugzilla.novell.com/show_bug.cgi?id=580144 https://bugzilla.novell.com/show_bug.cgi?id=580144#c10 Luiz Angelo Daros de Luca changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |luizluca@tre-sc.gov.br --- Comment #10 from Luiz Angelo Daros de Luca 2013-11-07 20:16:16 UTC --- Is there anyone still dealing with this bug? It is still present in 13.1 RC2. openct uses the user scard/group scard. However, the usb devices are not readable/writable by this user. So, openct always fails. 2013-11-07T17:16:27.983943-02:00 tresc031501 ifdhandler[15838]: Unable to open USB device /dev/bus/usb/001/011: Permission denied 2013-11-07T17:16:27.984205-02:00 tresc031501 ifdhandler[15838]: usb:/dev/bus/usb/001/011: initialization failed (driver ccid) 2013-11-07T17:16:27.984441-02:00 tresc031501 ifdhandler[15838]: unable to open reader ccid usb /dev/bus/usb/001/011 2013-11-07T17:16:27.985665-02:00 tresc031501 ifdhandler[15840]: Unable to open USB device /dev/bus/usb/001/017: Permission denied 2013-11-07T17:16:27.985904-02:00 tresc031501 ifdhandler[15840]: usb:/dev/bus/usb/001/017: initialization failed (driver etoken64) 2013-11-07T17:16:27.986177-02:00 tresc031501 ifdhandler[15840]: unable to open reader etoken64 usb /dev/bus/usb/001/017 udev rule must be updated to add permissions to scard user/group. As a workarround, I added scard to root user and updated /etc/openct.conf with: ifdhandler { groups = { - scard, + scard,root, }; }; -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

10 Mar 10 Mar

12:21

New subject: [Bug 580144] openct: ownership mismatch between openct,conf and HAL

http://bugzilla.novell.com/show_bug.cgi?id=580144 Tomáš Chvátal changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #11 from Tomáš Chvátal --- This issue should be fixed in 13.2+ As per the added patch. The automatic system will sent the notification soon about it here. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

3341

Age (days ago)

5189

Last active (days ago)

Download

14 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com