Re: [Muscle] Login failed with libpam

2008-01-24 Thread Amanda Ortega 
Yes, the key is already on the card. I am sending the output with debug.

Amanda

# login
Welcome to pam_musclecard.so verification Module
Login Amanda: amanda
User = amanda
Please enter pin:
Random value =
29e4d86e5f9f4724542e91769e4e655d29fd7f56a107d477b0e6ba57b58ec2c2d
fd1ece260d847a4bca149e67dfed3ce2df81256284de06dc6ae7cad7a20f9aa9487d6a7b6337a7a0
1ee6eea5e4990005c0d217fc7ebdce8c6009c4786f10bc2f10ec47592666de3a48714d989ac96731
34d7516dbed3ceeb7d0b229bd951829

Cipher value =
ad2793ec98ee9c147ecf99e3fdf6847eda01b35bbab9bfef42a9194d880585a81
e131b2d5ed6eb4e0a39c81ffbeea12cd472e72296db31aee3c2a5d0c1d58ae64efc6e10fce0ebd66
ba8c03f2ff83b8985f94a5f11ed4fc2a017a3bf8bebf40c03a515c1495ade367b50f7fad7ae94edd
f452bd43ac816b18902fa8e44d1219a


Login incorrect

Login incorrect

Login incorrect

Login incorrect
Login Amanda:

2008/1/24, Karsten Ohme <[EMAIL PROTECTED]>:
>
> Amanda Ortega schrieb:
> > Hello!!
> >
> > I am trying to use libpam to login with smart card. I configured the
> > file /etc/musclepam/pam-muscle.conf to the module search the certificate
> > at ~/muscle/user.cert. Then, I generated the certificate and put it
> > there. Last, I added the following line at the file /etc/pam.d/login:
>
> That means the key is also already on the card? I think the muscle pam
> module has also a debug switch (DEBUG=ON) in pam-muscle.conf. Maybe the
> problem shows.
>
> Karsten
> >
> > auth requisite /lib/security/pam-musclecard.so nullok reader=0
> >
> > Then, when I try to login typing an incorrect PIN, it shows the message
> >
> > Invalid PIN Entered
> >
> > but, when I type the correct PIN, this message isn't showed. Although,
> > in both cases a message
> >
> > Login incorrect
> >
> > is showed. I think it is verifying correctly the PIN, but I don't know
> > why it doesn't login.
> >
> > The result of the command
> >
> > pcscd -a -d -f
> >
> > follows at the end of the e-mail.
> >
> > What is happening?
> >
> > Thanks in advance,
> > Amanda
> >
> > # pcscd -a -d -f
> > pcscdaemon.c:259:main() pcscd set to foreground with debug send to
> stderr
> > pcscdaemon.c:464:main() pcsc-lite 1.3.2 daemon ready.
> > hotplug_libusb.c:407:HPAddHotPluggable() Adding USB device: 001:003
> > readerfactory.c :1093:RFInitializeReader() Attempting startup of Gemplus
> > GemPC Twin 00 00 using
> > /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Linux/libccid.so.1.1.0
> > readerfactory.c:964:RFBindFunctions() Loading IFD Handler 3.0
> > ifdhandler.c :1182:init_driver() LogLevel: 0x0003
> > ifdhandler.c:1192:init_driver() DriverOptions: 0x
> > ifdhandler.c:77:IFDHCreateChannelByName() lun: 0, device:
> > usb:08e6/3437:libusb:001:003
> > ccid_usb.c:231:OpenUSBByName() Manufacturer: Ludovic Rousseau (
> > [EMAIL PROTECTED] )
> > ccid_usb.c:241:OpenUSBByName() ProductString: Generic CCID driver v1.1.0
> > ccid_usb.c:247:OpenUSBByName() Copyright: This driver is protected by
> > terms of the GNU Lesser General Public License version 2.1, or (at your
> > option) any later version.
> > ccid_usb.c:395:OpenUSBByName() Found Vendor/Product: 08E6/3437 (Gemplus
> > GemPC Twin)
> > ccid_usb.c:397:OpenUSBByName() Using USB bus/device: 001/003
> > ccid_usb.c:800:get_data_rates() declared: 10753 bps
> > ccid_usb.c:800:get_data_rates() declared: 14337 bps
> > ccid_usb.c:800:get_data_rates() declared: 15625 bps
> > ccid_usb.c:800:get_data_rates() declared: 17204 bps
> > ccid_usb.c:800:get_data_rates() declared: 20833 bps
> > ccid_usb.c:800:get_data_rates() declared: 21505 bps
> > ccid_usb.c:800:get_data_rates() declared: 23438 bps
> > ccid_usb.c:800:get_data_rates() declared: 25806 bps
> > ccid_usb.c:800:get_data_rates() declared: 28674 bps
> > ccid_usb.c:800:get_data_rates() declared: 31250 bps
> > ccid_usb.c:800:get_data_rates() declared: 32258 bps
> > ccid_usb.c:800:get_data_rates() declared: 34409 bps
> > ccid_usb.c:800:get_data_rates() declared: 39063 bps
> > ccid_usb.c:800:get_data_rates() declared: 41667 bps
> > ccid_usb.c:800:get_data_rates() declared: 43011 bps
> > ccid_usb.c:800:get_data_rates() declared: 46875 bps
> > ccid_usb.c:800:get_data_rates() declared: 52083 bps
> > ccid_usb.c:800:get_data_rates() declared: 53763 bps
> > ccid_usb.c:800:get_data_rates() declared: 57348 bps
> > ccid_usb.c:800:get_data_rates() declared: 62500 bps
> > ccid_usb.c:800:get_data_rates() declared: 64516 bps
> > ccid_usb.c:800:get_data_rates() declared: 68817 bps
> > ccid_usb.c:800:get_data_rates() declared: 71685 bps
> > ccid_usb.c:800:get_data_rates() declared: 78125 bps
> > ccid_usb.c:800:get_data_rates() declared: 8 bps
> > ccid_usb.c:800:get_data_rates() declared: 86022 bps
> > ccid_usb.c:800:get_data_rates() declared: 93750 bps
> > ccid_usb.c:800:get_data_rates() declared: 104167 bps
> > ccid_usb.c:800:get_data_rates() declared: 107527 bps
> > ccid_usb.c:800:get_data_rates() declared: 114695 bps
> > ccid_usb.c:800:get_data_rates() declared: 125000 bps
> > ccid_usb.c:800:get_data_rates() declared: 129032 bps
> > ccid_usb.c:

Re: [Muscle] Login failed with libpam

2008-01-24 Thread Karsten Ohme 
Amanda Ortega schrieb:
> Hello!!
> 
> I am trying to use libpam to login with smart card. I configured the
> file /etc/musclepam/pam-muscle.conf to the module search the certificate
> at ~/muscle/user.cert. Then, I generated the certificate and put it
> there. Last, I added the following line at the file /etc/pam.d/login:

That means the key is also already on the card? I think the muscle pam
module has also a debug switch (DEBUG=ON) in pam-muscle.conf. Maybe the
problem shows.

Karsten
> 
> auth requisite /lib/security/pam-musclecard.so nullok reader=0
> 
> Then, when I try to login typing an incorrect PIN, it shows the message
> 
> Invalid PIN Entered
> 
> but, when I type the correct PIN, this message isn't showed. Although,
> in both cases a message
> 
> Login incorrect
> 
> is showed. I think it is verifying correctly the PIN, but I don't know
> why it doesn't login.
> 
> The result of the command
> 
> pcscd -a -d -f
> 
> follows at the end of the e-mail.
> 
> What is happening?
> 
> Thanks in advance,
> Amanda
> 
> # pcscd -a -d -f
> pcscdaemon.c:259:main() pcscd set to foreground with debug send to stderr
> pcscdaemon.c:464:main() pcsc-lite 1.3.2 daemon ready.
> hotplug_libusb.c:407:HPAddHotPluggable() Adding USB device: 001:003
> readerfactory.c :1093:RFInitializeReader() Attempting startup of Gemplus
> GemPC Twin 00 00 using
> /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Linux/libccid.so.1.1.0
> readerfactory.c:964:RFBindFunctions() Loading IFD Handler 3.0
> ifdhandler.c :1182:init_driver() LogLevel: 0x0003
> ifdhandler.c:1192:init_driver() DriverOptions: 0x
> ifdhandler.c:77:IFDHCreateChannelByName() lun: 0, device:
> usb:08e6/3437:libusb:001:003
> ccid_usb.c:231:OpenUSBByName() Manufacturer: Ludovic Rousseau (
> [EMAIL PROTECTED] )
> ccid_usb.c:241:OpenUSBByName() ProductString: Generic CCID driver v1.1.0
> ccid_usb.c:247:OpenUSBByName() Copyright: This driver is protected by
> terms of the GNU Lesser General Public License version 2.1, or (at your
> option) any later version.
> ccid_usb.c:395:OpenUSBByName() Found Vendor/Product: 08E6/3437 (Gemplus
> GemPC Twin)
> ccid_usb.c:397:OpenUSBByName() Using USB bus/device: 001/003
> ccid_usb.c:800:get_data_rates() declared: 10753 bps
> ccid_usb.c:800:get_data_rates() declared: 14337 bps
> ccid_usb.c:800:get_data_rates() declared: 15625 bps
> ccid_usb.c:800:get_data_rates() declared: 17204 bps
> ccid_usb.c:800:get_data_rates() declared: 20833 bps
> ccid_usb.c:800:get_data_rates() declared: 21505 bps
> ccid_usb.c:800:get_data_rates() declared: 23438 bps
> ccid_usb.c:800:get_data_rates() declared: 25806 bps
> ccid_usb.c:800:get_data_rates() declared: 28674 bps
> ccid_usb.c:800:get_data_rates() declared: 31250 bps
> ccid_usb.c:800:get_data_rates() declared: 32258 bps
> ccid_usb.c:800:get_data_rates() declared: 34409 bps
> ccid_usb.c:800:get_data_rates() declared: 39063 bps
> ccid_usb.c:800:get_data_rates() declared: 41667 bps
> ccid_usb.c:800:get_data_rates() declared: 43011 bps
> ccid_usb.c:800:get_data_rates() declared: 46875 bps
> ccid_usb.c:800:get_data_rates() declared: 52083 bps
> ccid_usb.c:800:get_data_rates() declared: 53763 bps
> ccid_usb.c:800:get_data_rates() declared: 57348 bps
> ccid_usb.c:800:get_data_rates() declared: 62500 bps
> ccid_usb.c:800:get_data_rates() declared: 64516 bps
> ccid_usb.c:800:get_data_rates() declared: 68817 bps
> ccid_usb.c:800:get_data_rates() declared: 71685 bps
> ccid_usb.c:800:get_data_rates() declared: 78125 bps
> ccid_usb.c:800:get_data_rates() declared: 8 bps
> ccid_usb.c:800:get_data_rates() declared: 86022 bps
> ccid_usb.c:800:get_data_rates() declared: 93750 bps
> ccid_usb.c:800:get_data_rates() declared: 104167 bps
> ccid_usb.c:800:get_data_rates() declared: 107527 bps
> ccid_usb.c:800:get_data_rates() declared: 114695 bps
> ccid_usb.c:800:get_data_rates() declared: 125000 bps
> ccid_usb.c:800:get_data_rates() declared: 129032 bps
> ccid_usb.c:800:get_data_rates() declared: 143369 bps
> ccid_usb.c:800:get_data_rates() declared: 156250 bps
> ccid_usb.c:800:get_data_rates() declared: 17 bps
> ccid_usb.c:800:get_data_rates() declared: 172043 bps
> ccid_usb.c:800:get_data_rates() declared: 215054 bps
> ccid_usb.c:800:get_data_rates() declared: 229391 bps
> ccid_usb.c:800:get_data_rates() declared: 25 bps
> ccid_usb.c:800:get_data_rates() declared: 344086 bps
> ifdhandler.c:271:IFDHGetCapabilities() lun: 0, tag: 0xFAE
> ifdhandler.c:313:IFDHGetCapabilities() Reader supports 1 slots
> ifdhandler.c:806:IFDHPowerICC() lun: 0
> Card ATR: 3B 7A 94 00 00 80 65 A2 01 01 01 3D 72 D6 43
> winscard_msg_srv.c:203:SHMProcessEventsServer() Common channel packet
> arrival
> winscard_msg_srv.c:212:SHMProcessEventsServer()
> SHMProcessCommonChannelRequest detects: 7
> pcscdaemon.c:151:SVCServiceRunLoop() A new context thread creation is
> requested: 7
> winscard_svc.c:132:ContextThread() Thread is started: 7
> winscard_msg_srv.c:274:SHMProcessEventsContext() correctly processed
> cli

[Muscle] Login failed with libpam

2008-01-24 Thread Amanda Ortega 
Hello!!

I am trying to use libpam to login with smart card. I configured the file
/etc/musclepam/pam-muscle.conf to the module search the certificate at
~/muscle/user.cert. Then, I generated the certificate and put it there.
Last, I added the following line at the file /etc/pam.d/login:

auth requisite /lib/security/pam-musclecard.so nullok reader=0

Then, when I try to login typing an incorrect PIN, it shows the message

Invalid PIN Entered

but, when I type the correct PIN, this message isn't showed. Although, in
both cases a message

Login incorrect

is showed. I think it is verifying correctly the PIN, but I don't know why
it doesn't login.

The result of the command

pcscd -a -d -f

follows at the end of the e-mail.

What is happening?

Thanks in advance,
Amanda

# pcscd -a -d -f
pcscdaemon.c:259:main() pcscd set to foreground with debug send to stderr
pcscdaemon.c:464:main() pcsc-lite 1.3.2 daemon ready.
hotplug_libusb.c:407:HPAddHotPluggable() Adding USB device: 001:003
readerfactory.c:1093:RFInitializeReader() Attempting startup of Gemplus
GemPC Twin 00 00 using /usr/lib/pcsc/drivers/ifd-ccid.bundle
/Contents/Linux/libccid.so.1.1.0
readerfactory.c:964:RFBindFunctions() Loading IFD Handler 3.0
ifdhandler.c:1182:init_driver() LogLevel: 0x0003
ifdhandler.c:1192:init_driver() DriverOptions: 0x
ifdhandler.c:77:IFDHCreateChannelByName() lun: 0, device:
usb:08e6/3437:libusb:001:003
ccid_usb.c:231:OpenUSBByName() Manufacturer: Ludovic Rousseau (
[EMAIL PROTECTED])
ccid_usb.c:241:OpenUSBByName() ProductString: Generic CCID driver v1.1.0
ccid_usb.c:247:OpenUSBByName() Copyright: This driver is protected by terms
of the GNU Lesser General Public License version 2.1, or (at your option)
any later version.
ccid_usb.c:395:OpenUSBByName() Found Vendor/Product: 08E6/3437 (Gemplus
GemPC Twin)
ccid_usb.c:397:OpenUSBByName() Using USB bus/device: 001/003
ccid_usb.c:800:get_data_rates() declared: 10753 bps
ccid_usb.c:800:get_data_rates() declared: 14337 bps
ccid_usb.c:800:get_data_rates() declared: 15625 bps
ccid_usb.c:800:get_data_rates() declared: 17204 bps
ccid_usb.c:800:get_data_rates() declared: 20833 bps
ccid_usb.c:800:get_data_rates() declared: 21505 bps
ccid_usb.c:800:get_data_rates() declared: 23438 bps
ccid_usb.c:800:get_data_rates() declared: 25806 bps
ccid_usb.c:800:get_data_rates() declared: 28674 bps
ccid_usb.c:800:get_data_rates() declared: 31250 bps
ccid_usb.c:800:get_data_rates() declared: 32258 bps
ccid_usb.c:800:get_data_rates() declared: 34409 bps
ccid_usb.c:800:get_data_rates() declared: 39063 bps
ccid_usb.c:800:get_data_rates() declared: 41667 bps
ccid_usb.c:800:get_data_rates() declared: 43011 bps
ccid_usb.c:800:get_data_rates() declared: 46875 bps
ccid_usb.c:800:get_data_rates() declared: 52083 bps
ccid_usb.c:800:get_data_rates() declared: 53763 bps
ccid_usb.c:800:get_data_rates() declared: 57348 bps
ccid_usb.c:800:get_data_rates() declared: 62500 bps
ccid_usb.c:800:get_data_rates() declared: 64516 bps
ccid_usb.c:800:get_data_rates() declared: 68817 bps
ccid_usb.c:800:get_data_rates() declared: 71685 bps
ccid_usb.c:800:get_data_rates() declared: 78125 bps
ccid_usb.c:800:get_data_rates() declared: 8 bps
ccid_usb.c:800:get_data_rates() declared: 86022 bps
ccid_usb.c:800:get_data_rates() declared: 93750 bps
ccid_usb.c:800:get_data_rates() declared: 104167 bps
ccid_usb.c:800:get_data_rates() declared: 107527 bps
ccid_usb.c:800:get_data_rates() declared: 114695 bps
ccid_usb.c:800:get_data_rates() declared: 125000 bps
ccid_usb.c:800:get_data_rates() declared: 129032 bps
ccid_usb.c:800:get_data_rates() declared: 143369 bps
ccid_usb.c:800:get_data_rates() declared: 156250 bps
ccid_usb.c:800:get_data_rates() declared: 17 bps
ccid_usb.c:800:get_data_rates() declared: 172043 bps
ccid_usb.c:800:get_data_rates() declared: 215054 bps
ccid_usb.c:800:get_data_rates() declared: 229391 bps
ccid_usb.c:800:get_data_rates() declared: 25 bps
ccid_usb.c:800:get_data_rates() declared: 344086 bps
ifdhandler.c:271:IFDHGetCapabilities() lun: 0, tag: 0xFAE
ifdhandler.c:313:IFDHGetCapabilities() Reader supports 1 slots
ifdhandler.c:806:IFDHPowerICC() lun: 0
Card ATR: 3B 7A 94 00 00 80 65 A2 01 01 01 3D 72 D6 43
winscard_msg_srv.c:203:SHMProcessEventsServer() Common channel packet
arrival
winscard_msg_srv.c:212:SHMProcessEventsServer()
SHMProcessCommonChannelRequest detects: 7
pcscdaemon.c:151:SVCServiceRunLoop() A new context thread creation is
requested: 7
winscard_svc.c:132:ContextThread() Thread is started: 7
winscard_msg_srv.c:274:SHMProcessEventsContext() correctly processed client:
7
winscard_svc.c:179:ContextThread() Client is protocol version 2:1
winscard_msg_srv.c:274:SHMProcessEventsContext() correctly processed client:
7
winscard.c:159:SCardEstablishContext() Establishing Context: 16992230
winscard_msg_srv.c:274:SHMProcessEventsContext() correctly processed client:
7
winscard.c:213:SCardConnect() Attempting Connect to Gemplus GemPC Twin 00 00
using protocol: 3
prothandler.c:130:PHSetProtocol() A