Hi,
today I tried to use rdesktop with smartcard redirection (rdesktop ...
-r scard:"REINER SCT ..." ...) in openSUSE 13.2 RC1:
1) I installed the following packages:
S | Name | Type | Version | Arch |
Repository
--+----------------+---------+------------------------+------+------------------
i | libpcsclite1 | package | 1.8.11-4.1.3 | i586 |
openSUSE-13.2-Oss
i | pcsc-cyberjack | package | 3.99.5final.SP05-4.1.3 | i586 |
openSUSE-13.2-Oss
i | pcsc-lite | package | 1.8.11-4.1.3 | i586 |
openSUSE-13.2-Oss
i | pcsc-tools | package | 1.4.23-1.4 | i586 |
security:chipcard
i | perl-pcsc | package | 1.4.10-13.1.4 | i586 |
openSUSE-13.2-Oss
2) I started pcscd.
3) rdesktop ...
--> ERROR: scard_enum_devices: PCSC service not available
The system error log told me:
Okt 11 14:58:54 linux-d1xu.site pcscd[3916]:
auth.c:136:IsClientAuthorized() Process 3929 (user: 1000) is NOT
authorized for action: access_pcsc
Okt 11 14:58:54 linux-d1xu.site pcscd[3916]:
winscard_svc.c:329:ContextThread() Rejected unauthorized PC/SC client
I tried several things, but eventually I changed
/etc/polkit-1/rules.d/90-default-privs.rules to allow any process access
to the card reader and the card:
...
'org.debian.pcsc-lite.access_pcsc':
[ 'yes', 'yes', 'yes' ],
...
'org.debian.pcsc-lite.access_card':
[ 'yes', 'yes', 'yes' ],
...
After restarting the daemons rdesktop was able to redirect the card reader.
My question:
How is this supposed to work? What is the "official" way to configure
this? Or ist this a bug in rdesktop, not requesting administrative rights?
regards,
Hendrik
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org
To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org