Users cannot authenticate with Gemalto.NET smartcard readers to MS Windows Servers in RHEL 6

Solution Verified - Updated -

Environment

  • Red Hat Enterprise Linux (RHEL) 6
  • pcsc-lite-1.5.2-8
  • rdesktop-1.7.1-1
  • xfreerdp
  • Microsoft Windows Server 2003, 2008, 2012

Issue

  • Users cannot authenticate with Gemalto.NET smartcard readers to MS Windows Servers.

Resolution

This issue has been reported as resolved in pcsc-lite version 1.5.2-13.

Red Hat recommends upgrading this this version or newer.

If you have any questions please contact Red Hat Technical Support.

Root Cause

The root cause of this issue is still under investigation, however updates to pcsc-lite-1.5.1-13 seem to have resolved this issue.

Diagnostic Steps

When using Microsoft server 2003, after the system asks for pin, there is a message:

The system could not log on you. An error occurred trying to use this smartcard.

When using Microsoft server 2008 or 2012 there is no pin request. The message hangs at:

Reading Smart Card

Sometimes (not always) there is an error visible in pcscd logs:

00000045 utils.c:123:StatSynchronize() Can't open /var/run/pcscd.events/event.9607.17026240: Bad file descriptor

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.