similar to: CentOS 6, firefox, PIV cards

Hi, folks, Up until a few weeks ago, it worked as it has been for years: firefox, security device is libcoolkey, and pcscd. Today, I go to use it (I have done updates sine I last used it), and try preferences->advanced->certificates, and it hangs. My most recent try was for over 20 min. If you move something over the window, then move it away, it's a blank window. Pull out the

So, it *seems* to be working, pretty much. I needed to install opensc, openct pcsc-lite, pcsc-lite-openct, and ctapi-common will be installed as a dependency. I *removed* coolkey and esc, which depended on it. 100% of the time, they misidentifed the new/current US federal ID PIV-II cards as coolkey cards, and popped up this "phone home" window, then a "manage smartcards"

> -----Original Message----- > From: m.roth at 5-cent.us [mailto:m.roth at 5-cent.us] > Sent: Friday, July 22, 2016 4:15 PM > To: CentOS mailing list > Subject: Re: [CentOS] CentOS 6.7->6.8, ssh-add issue, followup, more info > > m.roth at 5-cent.us wrote: > > Folks, > > > > I am perplexed. I updated my workstation at work Wed before I left, > >

On Thu, 2014-12-04 at 11:30 -0500, m.roth at 5-cent.us wrote: > Cal Webster wrote: > > On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > >> On 12/03/14 17:34, Cal Webster wrote: > >> > Can anyone help with getting the new DoD CACs (Smart Card) to work in > >> > CentOS 6.6? I don't use it for console logins, only for email and .mil > >> > web

On Thu, 2014-12-04 at 08:08 -0500, mark wrote: > On 12/03/14 17:34, Cal Webster wrote: > > Can anyone help with getting the new DoD CACs (Smart Card) to work in > > CentOS 6.6? I don't use it for console logins, only for email and .mil > > web sites. > > > > I recently had to get a new DoD CAC (Smart Card) when one of the > > buildings I work in upgraded

Hi Tony, Have you solved this problem yet?I took another approach and used CACkey which supportsUS Government PIV cards including the CAC.? In my case I set it up on Linux Mint but there is an rpm version of CACKey for 32 or 64 bit Centos.Here is the process I went through. - setup CAC card by following instructions on: https://help.ubuntu.com/community/CommonAccessCard sudo apt-get install

Before I roll it out to users for their workstations, I updated my own system to 6.3, just did an update a few minutes ago, then rebooted. Came up... but when I went to use my PIV card for credentials to certain other machines, it didn't read the card. I found that pcscd was not running - when I did a service restart, it said "failed" on shutdown, then ok on startup. chkconfig --list

Tue Jul 26 21:17:40 UTC 2016, m.roth at 5-cent.us wrote: > I could try the reinstall, but it's very odd - everything worked, and now, > after the upgrade, it doesn't. Oh, and here's another twist on this: Under > 6.7, if I'd logged into my webmail via firefox, and while that was > happening, I stuck my AA ("Logical token" card) into the keyboard slot, >

CentOS 7, In firefox -> privacy & security -> certificates -> security devices i am trying to load the pkcs11 modules, but get the error unable to load. I am following the directions at https://piv.idmanagement.gov/engineering/firefox/ I have installed opensc and openssl-pkcs11, which contains /usr/lib64/openssl/engines/pkcs11.so and am using that is the module Has anybody here

Almost there on getting the current US fed PIV cards working properly (and *not* pulling up the idiot coolkey stuff), and I was just looking for where ssh-agent is started automagically when you log in... and I found the thread I started early last April... and that inlcuded you, Todd, mentioning where it's started (/etc/X11/xinit/xinitrc-common), so, a second tip o' th' hat to you.

Can anyone help with getting the new DoD CACs (Smart Card) to work in CentOS 6.6? I don't use it for console logins, only for email and .mil web sites. I recently had to get a new DoD CAC (Smart Card) when one of the buildings I work in upgraded their security system. My old CAC was working fine prior to this for signing and encrypting email and for authenticating to various DoD (.mil) sites

Folks, I am perplexed. I updated my workstation at work Wed before I left, from 6.7 to 6.8. Then, yesterday, I went to use ssh-add -s libcoolkeypk11.so, which I've done many times before to add the certs from my PIV card... and 100% of the time if fails, letting me SSH_AGENT_FAILURE, cannot add card. Now, using a script called sccr, which uses my public and private key to generate a

I thought DoD used RHEL and not Centos, or did Centos did approved DADEMS recently? On Wed, Dec 3, 2014 at 5:34 PM, Cal Webster <cwebster at ec.rr.com> wrote: > Can anyone help with getting the new DoD CACs (Smart Card) to work in > CentOS 6.6? I don't use it for console logins, only for email and .mil > web sites. > > I recently had to get a new DoD CAC (Smart Card) when

> -----Original Message----- > From: centos-bounces at centos.org > [mailto:centos-bounces at centos.org] On Behalf Of Cal Webster > Sent: Wednesday, December 03, 2014 17:35 > To: CentOS List > Subject: [CentOS] Firefox fails to authenticate .mil sites > with New DoD CAC > > Can anyone help with getting the new DoD CACs (Smart Card) to work in > CentOS 6.6? I

CentOS 6.4. We've got a subversion repo on a server. Currently, it's set to use krb5. Trouble is, the krb5.conf is set up to use pcscd authentication (using PIV cards). Whether anything else on the server needs it, it appears that when people issue certain svn commands (I haven't nailed down which), the thing tries to look at the pcscd.pid... and selinux complains that this is

Hi All, We have an old Centos 3.5 file and database server, running on a pIII computer with Intel 820 mother board. It has a software raid 1(mirror) + LVM on two IDE hard disk. I want to upgrade to a newer computer with pIV - 2.4GHz on a Intel D848PMB mother board. Should I expect any problems if I just move the array from the old machine to the new and boot there? Should I do any

Anyone working with/using it? One thing that's driving me nuts is that it keeps spitting garbage into the logs (card absent or mute!!!). I just tried editing /etc/init.d/pcscd - there's *no* way to pass parms from the config file - and set the logging level to --error, and it's still doing it. Clues for the poor, to shut it up? mark

Hey everyone. Our network has a PII 350Mhz Windows NT server. It serves as our PDC. It also serves our email, print and file sharing needs. We have plans of totally phasing out this computer. There are two candidates for the replacement of our PDC. One is a PIV 1.7Ghz with 768MB of memory (hostname: Karou). This computer is currently our intranet web server. The other computer is a PIV 2.8Ghz

I updated my work desktop to kernel-3.10.0-1062.4.1.el7.x86_64 yesterday as I was leaving. This morning booted into that new kernel I was unable to login using my common access card.? Rebooted in the previous kernel (3.10.0-1062.1.2.el7.x86_64) and smart card login works fine. Anyone else seeing any similar problems?? I haven't had time to dig deeply into the logs yet but I did a bunch of

I have been looking at replacing our current login systems with a single login solution. In the process I managed to get sidetracked into investigating pam_pkcs11. My question, which no doubt reveals the depth of my ignorance, is: Can a simple USB flash memory stick be configured to work with this or some similar module of which I as yet know nothing? Everything I have managed to find about