libpam-poldi crashes when device is in use

Bug #74209 reported by Jelmer Vernooij
12
Affects Status Importance Assigned to Milestone
poldi (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

 affects /ubuntu/poldi

The Poldi pam module crashes when the device is already in use, for
example by another instance of libpam-poldi or gpg-agent that is using
the device.

Revision history for this message
Jussi Kukkonen (jku) wrote : example output

Attaching the output from "poldi-ctrl -d"

Version: 0.3.0-4 (in Feisty)

Changed in poldi:
status: New → Confirmed
Revision history for this message
RandyWallace (randywallacejr) wrote :

In my setup, I use libpam_poldi.so in the /etc/pam.d/common-auth file:

sufficient pam_poldi.so quiet
requisite pam_unix.so ...

Accessing the card via "gpg --card-status", for example, will cause any PAM Authentication to fail.

Furthermore, any other authentication done by the card, i.e. sending a signed message via enigmail, will cause pam_poldi.so to crash.

In order to regain PAM Authentication, I have to unplug, then plug back in, the USB Card Reader.

I am running the following smart card related applications (daemons):

pcscd
scdaemon
gpg-agent

I have not found a way to bypass pam_podi.so post-crash.

Revision history for this message
RandyWallace (randywallacejr) wrote :

I have concluded that my problems are directly related to gpg-agent. I removed it.

pcscd is still running, scdaemon is not, gpg-agent is gone.

i can scan my card via gpg --card-status and login still works.

furthermore, i can pcsc_scan in the background, and login still works.

There is a new version of pam_poldi ( 0.4 ) available for the brave:

http://g10code.com/p-poldi.html

I got bored and gave up after 4 hours. Compilation wasn't the problem, it was the configuration and debugging.

It's supposed to use scdaemon for the backend, as opposed to checking a more difficult way. I was not able to
conclude if this resolves the bug.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.