Card only available to root user

[Luis de Bethencourt]

On Fri, Aug 05, 2011 at 01:07:19AM +0200, Hauke Laging wrote:
> Am Freitag, 5. August 2011, 03:02:07 schrieb Luis de Bethencourt:
> > device in debian:
> > crw-rw-r--+ 1 root root 189, 516 2011-08-05 00:46 /dev/bus/usb/005/005
> > 
> > device in gentoo:
> > crw-rw-r-- 1 root pcscd 189, 395 Aug  5 02:56 /dev/bus/usb/004/012
> > 
> > my user is part of the pcscd group. I just checked.
> 
> I have no certain problem in mind. My general advice is to check with strace 
> what's going on. Often the problem can easily be seen shortly before the 
> program abort. If not you may compare the outputs of the root and user calls.
>

I run strace both running gpg --card-status as user and root, but without the
card reader plugged in to make it simpler and I noticed that it diverts
right before at the end. Pasting where it diverts:

user:

read(3, "ERR 103 unknown command\n", 1002) = 24
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa69e8ad000
write(2, "gpg: selecting openpgp failed: U"..., 55gpg: selecting openpgp failed: Unsupported certificate
) = 55
write(2, "gpg: OpenPGP card not available:"..., 57gpg: OpenPGP card not available: Unsupported certificate
) = 57
munmap(0x7fa69e8af000, 32768)           = 0
exit_group(2)                           = ?


root:

read(3, scdaemon[6104]: PC/SC OPEN failed: unknown PC/SC error code
"ERR 100663404 Card error <SCD>\n", 1002) = 31
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa70a56f000
write(2, "gpg: selecting openpgp failed: C"..., 42gpg: selecting openpgp failed: Card error
) = 42
write(2, "gpg: OpenPGP card not available:"..., 44gpg: OpenPGP card not available: Card error
) = 44
munmap(0x7fa70a571000, 32768)           = 0
exit_group(2)                           = ?


this are the few lines before the diversion:

write(6, "OPTION allow-pinentry-notify", 28) = 28
write(6, "\n", 1)                       = 1
read(3, "OK\n", 1002)                   = 3
write(6, "SCD SERIALNO openpgp", 20)    = 20
write(6, "\n", 1)                       = 1


not sure if this helps, or if anybody can read any problem here. I certainly can't :P

Thanks,
Luis
 
> 
> CU
> 
> Hauke
> -- 
> PGP: D44C 6A5B 71B0 427C CED3 025C BD7D 6D27 ECCB 5814


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: </pipermail/attachments/20110805/b1f8f059/attachment.pgp>