On Tue, Mar 09, 2021 at 12:16:36PM -0000, Vladimir Vakhlamov wrote:
Don't you intermix "device" (module) and "slot"?
i guess i don't. I just meant this condition: https://github.com/SSSD/sssd/blob/8e8ccca5d647b373ce633df18578376df0681473/s...
Hi,
this is a known issue, https://github.com/SSSD/sssd/issues/5025. The current behavior was mainly added to behave similar to pam_pkcs11.
When token has more than one removable slot in that place we don't try to find certificates for another removable slot. I faced with problem when my certificate located in second removable slot.
As a workaround it might be possible to add a PKCS#11 URI with the p11_uri option to tell SSSD to always use a specific reader, see man sssd.conf for details.
bye, Sumit
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org To unsubscribe send an email to sssd-devel-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.o... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure