Attachment 18147 Details for Bug 53501 – $ pamtester kde-smartcard test authenticate

$ pamtester kde-smartcard test authenticate

pamtester.txt (text/plain), 6.88 KB, created by Vladislav Glinkin on 2025-04-03 18:43:18 MSK

(hide)

Description:

Filename:

MIME Type:

Creator: Vladislav Glinkin

Created: 2025-04-03 18:43:18 MSK

Size: 6.88 KB

patch

obsolete

>$ pamtester kde-smartcard test authenticate
>DEBUG:pam_config.c:200: Invalid CRL policy: subject
>DEBUG:pam_pkcs11.c:283: Is it a screen saver?
>DEBUG:pam_pkcs11.c:327: explicit username = [test]
>DEBUG:pam_pkcs11.c:337: loading pkcs #11 module...
>DEBUG:pkcs11_lib.c:1000: PKCS #11 module = [/usr/lib64/librtpkcs11ecp.so]
>DEBUG:pkcs11_lib.c:1016: module permissions: uid = 0, gid = 0, mode = 644
>DEBUG:pkcs11_lib.c:1026: loading module /usr/lib64/librtpkcs11ecp.so
>DEBUG:pkcs11_lib.c:1034: getting function list
>DEBUG:pam_pkcs11.c:353: initialising pkcs #11 module...
>DEBUG:pkcs11_lib.c:1179: module information:
>DEBUG:pkcs11_lib.c:1180: - version: 2.40
>DEBUG:pkcs11_lib.c:1181: - manufacturer: Aktiv Co.
>DEBUG:pkcs11_lib.c:1182: - flags: 0000
>DEBUG:pkcs11_lib.c:1183: - library description: Rutoken ECP PKCS #11 library
>DEBUG:pkcs11_lib.c:1184: - library version: 2.16
>DEBUG:pkcs11_lib.c:1076: number of slots (a): 15
>DEBUG:pkcs11_lib.c:1099: number of slots (b): 15
>DEBUG:pkcs11_lib.c:1111: slot 1:
>DEBUG:pkcs11_lib.c:1121: - description: Aktiv Rutoken ECP 00 00
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0007
>DEBUG:pkcs11_lib.c:1125: - token:
>DEBUG:pkcs11_lib.c:1131:   - label: Rutoken ECP
>DEBUG:pkcs11_lib.c:1132:   - manufacturer: Aktiv Co.
>DEBUG:pkcs11_lib.c:1133:   - model: Rutoken ECP
>DEBUG:pkcs11_lib.c:1134:   - serial: 41866484
>DEBUG:pkcs11_lib.c:1135:   - flags: 88040d
>DEBUG:pkcs11_lib.c:1111: slot 2:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 3:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 4:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 5:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 6:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 7:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 8:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 9:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 10:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 11:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 12:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 13:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 14:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>DEBUG:pkcs11_lib.c:1111: slot 15:
>DEBUG:pkcs11_lib.c:1121: - description:
>DEBUG:pkcs11_lib.c:1122: - manufacturer:
>DEBUG:pkcs11_lib.c:1123: - flags: 0006
>ÐÐ°Ð¹Ð´ÐµÐ½ Ð¢Ð¾ÐºÐµÐ½.
>DEBUG:pkcs11_lib.c:1410: opening a new PKCS #11 session for slot 1
>ÐÐ¾Ð±ÑÐ¾ Ð¿Ð¾Ð¶Ð°Ð»Ð¾Ð²Ð°ÑÑ, Rutoken ECP!
>ÐÐ²ÐµÐ´Ð¸ÑÐµ PIN-ÐºÐ¾Ð´ ÑÐ¾ÐºÐµÐ½Ð° Ð¢Ð¾ÐºÐµÐ½:
>DEBUG:pkcs11_lib.c:1429: login as user CKU_USER
>DEBUG:pkcs11_lib.c:1620: Saving Certificate #1:
>DEBUG:pkcs11_lib.c:1622: - type: 00
>DEBUG:pkcs11_lib.c:1623: - id:   45
>DEBUG:pkcs11_lib.c:1655: Found 1 certificates in token
>DEBUG:mapper_mgr.c:173: Retrieving mapper module list...
>DEBUG:mapper_mgr.c:73: Loading static module for mapper 'digest'
>DEBUG:mapper_mgr.c:197: Inserting mapper [digest] into list
>DEBUG:mapper_mgr.c:73: Loading static module for mapper 'cn'
>DEBUG:mapper_mgr.c:197: Inserting mapper [cn] into list
>DEBUG:mapper_mgr.c:73: Loading static module for mapper 'pwent'
>DEBUG:mapper_mgr.c:197: Inserting mapper [pwent] into list
>DEBUG:mapper_mgr.c:73: Loading static module for mapper 'uid'
>DEBUG:mapper_mgr.c:197: Inserting mapper [uid] into list
>DEBUG:mapper_mgr.c:73: Loading static module for mapper 'mail'
>DEBUG:mapper_mgr.c:197: Inserting mapper [mail] into list
>DEBUG:mapper_mgr.c:73: Loading static module for mapper 'subject'
>DEBUG:mapper_mgr.c:197: Inserting mapper [subject] into list
>DEBUG:mapper_mgr.c:73: Loading static module for mapper 'null'
>DEBUG:mapper_mgr.c:197: Inserting mapper [null] into list
>DEBUG:pam_pkcs11.c:538: verifying the certificate #1
>Verifying certificate...
>DEBUG:cert_vfy.c:471: Neither CA nor CRL check requested. CertVrfy() skipped
>DEBUG:mapper_mgr.c:307: Mapper module digest match() returns 0
>DEBUG:mapper_mgr.c:307: Mapper module cn match() returns 1
>DEBUG:pam_pkcs11.c:626: certificate is valid and matches the user
>Checking signature...
>DEBUG:pkcs11_lib.c:139: reading 128 random bytes from /dev/urandom
>DEBUG:pkcs11_lib.c:157: random-value[128] = [2d:60:2d:...:a8]
>DEBUG:pkcs11_lib.c:1738: private key type: 0x00000000
>DEBUG:pkcs11_lib.c:1857: hashing with SHA256
>DEBUG:pkcs11_lib.c:1899: hash[32] = [6c:ea:13:...:ac]
>DEBUG:pkcs11_lib.c:1904: C_SignInit: mech: 1, keytype: 0
>DEBUG:pkcs11_lib.c:1941: signature[256] = [d1:a7:8e:...:47]
>DEBUG:pam_pkcs11.c:689: verifying signature...
>DEBUG:cert_vfy.c:559: public key type: 0x00000006
>DEBUG:cert_vfy.c:560: public key bits: 0x00000800
>DEBUG:cert_vfy.c:615: hashing with SHA256
>DEBUG:cert_vfy.c:652: signature is valid
>DEBUG:mapper_mgr.c:214: unloading mapper module list
>DEBUG:mapper_mgr.c:137: calling mapper_module_end() digest
>DEBUG:mapper_mgr.c:148: Module digest is static: don't remove
>DEBUG:mapper_mgr.c:137: calling mapper_module_end() cn
>DEBUG:mapper_mgr.c:148: Module cn is static: don't remove
>DEBUG:mapper_mgr.c:137: calling mapper_module_end() pwent
>DEBUG:mapper_mgr.c:148: Module pwent is static: don't remove
>DEBUG:mapper_mgr.c:137: calling mapper_module_end() uid
>DEBUG:mapper_mgr.c:148: Module uid is static: don't remove
>DEBUG:mapper_mgr.c:137: calling mapper_module_end() mail
>DEBUG:mapper_mgr.c:148: Module mail is static: don't remove
>DEBUG:mapper_mgr.c:137: calling mapper_module_end() subject
>DEBUG:mapper_mgr.c:148: Module subject is static: don't remove
>DEBUG:mapper_mgr.c:137: calling mapper_module_end() null
>DEBUG:mapper_mgr.c:148: Module null is static: don't remove
>DEBUG:pkcs11_lib.c:1489: logout user
>DEBUG:pkcs11_lib.c:1496: closing the PKCS #11 session
>DEBUG:pkcs11_lib.c:1502: releasing keys and certificates
>DEBUG:pam_pkcs11.c:796: releasing pkcs #11 module...
>DEBUG:pam_pkcs11.c:799: authentication succeeded
>pamtester: successfully authenticated

Actions: View

Attachments on bug 53501: 18007 | 18147 | 18148