Re: GPG2 can't read smartcard

[Laverne Schrock]

On Thu, Oct 27, 2016 at 4:42 PM, Corey Sheldon
 wrote:
> On 10/27/2016 02:20 AM, Laverne Schrock wrote:
> > Hi,
> >
> > I have several Fedora 24 boxes, all of which have
> > /home from NFS. Some of these boxes were fresh
> > installs and some are upgrades from 23 (some of
> > which were fresh installs, and some of which were
> > probably upgrades from 22, etc).
> >
> > On the fresh installs, running `gpg2 --card-status`
> > prints out the card info. On the upgraded boxes,
> > running the same command gives
> >
> > gpg: selecting openpgp failed: No such device
> > gpg: OpenPGP card not available: No such device
> >
> > On both boxes, `rpm -qa | grep gnupg | sort` gives
> >
> > gnupg-1.4.21-1.fc24.x86_64
> > gnupg2-2.1.13-2.fc24.x86_64
> > gnupg2-smime-2.1.13-2.fc24.x86_64
> >
> > On both boxes, `rpm -qa | grep pcsc` gives
> >
> > pcsc-lite-1.8.17-2.fc24.x86_64
> > pcsc-lite-ccid-1.4.23-1.fc24.x86_64
> > pcsc-lite-libs-1.8.17-2.fc24.x86_64
> >
> > On both boxes, `ps ax -o user,stat,command | grep scd` gives
> >
> > root     Ssl  /usr/sbin/pcscd --foreground --auto-exit
> > schr1230 SLl  scdaemon --multi-server
> >
> > On the fresh boxes, the pcscd process sometimes
> > dies, but it comes right back when I run `gpg2 --card-status`
> > again. It doesn't seem to die on the old (non-working) boxes.
> >
> > I've checked dmesg and the device is being detected. It
> > is a Yubikey Neo. On the upgraded machines, when I log
> > out after trying this (or even just Ctrl-Alt-F1 to gdm) there
> > is a popup that says
> >
> > Authentication is required to access the smartcard.
> > Administrator
> > Password: <box for pw here>
> >
> > Entering the password has no effect.
> >
> > Any idea on what might be different on these older systems
> > that prevent this from working?
> >
> > Thanks,
> > Laverne Schrock
> > _______________________________________________
> > users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
>
> At this point:
>
> Authentication is required to access the smartcard.
> Administrator
> Password: <box for pw here>
>
> what admin password are you using the local system admin password or the
> smartcard admin password ( which on MOST smartcards, assuming no
> `unblock pin` has been run is 123456

I was trying the local root password. It didn't occur
to me to try using the admin PIN. I'll try that next
time I'm able to reproduce the prompt (turns out
it is a little intermittent). That said, one really
*shouldn't* need the admin pin for everyday tasks.