Re: [Pki-users] Utimaco HSM "Not Found" problem

On 04/26/2010 09:51 AM, Arshad Noor wrote: > Do you have any update on the JSS issue, Chandrasekar? Thanks. I don't. We may need to debug the JSS code to figure out what the problem is.... > > Arshad Noor > StrongAuth, Inc. > > Arshad Noor wrote: >> No luck. >> >> ------------- >> # pet105:~> setenforce 0 >> # pet105:~> TokenInfo /var/lib/subca01/alias >> Database Path: /var/lib/subca01/alias >> Found external module 'NSS Internal PKCS #11 Module' >> # pet105:~> >> ------------- >> >> Output from audit.log: >> >> ------------- >> type=MAC_STATUS msg=audit(1271980444.565:345): enforcing=0 >> old_enforcing=1 auid=500 ses=5 >> type=SYSCALL msg=audit(1271980444.565:345): arch=c000003e syscall=1 >> success=yes exit=1 a0=3 a1=7fff300dfb20 a2=1 a3=fffffff8 items=0 >> ppid=32217 pid=32292 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 >> egid=0 sgid=0 fsgid=0 tty=pts4 ses=5 comm="setenforce" >> exe="/usr/sbin/setenforce" >> subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >> ------------- >> >> Arshad Noor >> StrongAuth, Inc. >> >> Chandrasekar Kannan wrote: >>> On 04/22/2010 04:44 PM, Arshad Noor wrote: >>>> Interesting; it did not: >>>> >>>> # pet105:~> modutil -dbdir /var/lib/subca01/alias/ -nocertdb -list >>>> >>>> Listing of PKCS #11 Modules >>>> ----------------------------------------------------------- >>>> 1. NSS Internal PKCS #11 Module >>>> slots: 2 slots attached >>>> status: loaded >>>> >>>> slot: NSS Internal Cryptographic Services >>>> token: NSS Generic Crypto Services >>>> >>>> slot: NSS User Private Key and Certificate Services >>>> token: NSS Certificate DB >>>> >>>> 2. CryptoServer >>>> library name: /usr/bin/libcs2_pkcs11.so >>>> slots: 1 slot attached >>>> status: loaded >>>> >>>> slot: CryptoServer Device '/dev/cs2' - Slot No: 0 >>>> token: CBUAETEST >>>> ----------------------------------------------------------- >>>> # pet105:~> TokenInfo /var/lib/subca01/alias >>>> Database Path: /var/lib/subca01/alias >>>> Found external module 'NSS Internal PKCS #11 Module' >>>> # pet105:~> >>>> >>>> And there were no SELinux errors in the audit log. >>> >>> Can you 'setenforce 0' (putting selinux to permissive mode ) >>> and try one more time ?. >>> >>> >>>> >>>> Arshad Noor >>>> StrongAuth, Inc. >>>> >>>> >>>> Chandrasekar Kannan wrote: >>>>> >>>>> Looks like the NSS layer has no problems identifying the token. >>>>> can you use this tool and see if the JSS layer can see it as well ? >>>>> >>>>> http://www.redhat.com/docs/manuals/cert-system/8.0/cli/html/TokenInfo.html >>>>> >>>>> >>> >> >> _______________________________________________ >> Pki-users mailing list >> Pki-users(a)redhat.com >> https://www.redhat.com/mailman/listinfo/pki-users _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users