CAC reader setup questions

[captkirk]

I am trying to setup a CAC reader for some work related items. I am following the directions on http://symbolik.wordpress.com/2007/0...ders-on-linux/ and I seem to be having a problem. I used synaptic to install the first four packages, namely libusb, pcsc-lite, pcsc-tools, and ccid. There is not a package for coolkey listed in synaptic. I have found other links to the package, but when I try to install them, I get no libc6 installed, even though I can see it. I would follow the directions and build coolkey, but I don't seem to have everything installed I need to build and I can't get enough information to tell me what needs to be installed to build coolkey. Can someone point me in the direction of figuring out what my next step should be?

Thanks!

[psyopper]

Well...

I've been working on the same thing, and quite possibly for the same reasons! I decided to do it as the web page describes but I keep getting stuck at installing pcsc-tools. When I run "make install" it tells me it can't find pcsc-lite even though I set the environment variables myself.

Try downloading coolkey from the site listed and following the directions for the make.

[captkirk]

Well, your hint helped a little. I download the coolkey and looked at what I needed to build it. It took a while, but I was able to get it installed by installing the dependent packages. I then installed coolkey and it already had what I needed, without a rebuild. I then reflashed my reader and I was up and running!

[contemno]

i have a cac card as well, i followed the instructions on this page http://symbolik.wordpress.com/2007/0...ders-on-linux/
and it works excellent. i did it so i wouldnt have to type in a long password into ako, just login with my pin.

[Alterios]

I was searching for a way to get my cac card running and came across this thread. I went to the page and can not make heads or tails of it. Can someone translate it into kindergarten level please. The first part I'm having trouble with is:
"Set the build variable - “declare -x PKG_CONFIG_PATH=/usr/cac/lib/pkgconfig” - this is only needed for building, not later using these tools."
How do I do that?

The next thing I'm having problems with it that everytime I type: "cd libusb*0.1.12 && ./configure –prefix=/usr/cac && make && make install" it tells me; configure: error: invalid variable name: –prefix.

Please help. I have very easily set it up on both my wife's XP based comps and it is irking the hell out of me that it's so hard to do it in Ubuntu. I don't mind using the command line to install something as long as I can have a coherent non-uberuser set of instructions to follow. P.S. I have also tried the Gentoo guide as well. Thanks in advance.

[captkirk]

Go back to http://symbolik.wordpress.com/2007/0...ders-on-linux/ and look at the last comment (it was posted yesterday). Perhaps you posted it? It gives the details I think you are looking for to install and build what you need to get cac support working under ubuntu 7.04

[MrFSL]

Had an opportunity to look into this DoD CAC card business recently and here is what I found:

First I was supplied with a Model SCR331 CAC card reader, P/N 903533 rev.1.0. First I visited THIS WEBSITE and installed the latest firmware (using Windows).

Next I installed the following on feisty:

sudo apt-get install libusb-0.1-4 libpcsclite1 libpcsclite-dev pcscd pcsc-tools build-essential autoconf xlibs-dev libccid

I plugged the card reader into my Feisty laptop.

Restarted the pcsc daemon:

sudo /etc/init.d/pcscd restart

Made sure that the card reader was functioning using:

pcsc_scan

Next I downloaded coolkeys from HERE.

Extracted it to my desktop, changed directory, and compiled:

tar xvzf coolkey-1.1.0.tar.gz
cd coolkey-1.1.0
autoconf
./configure
make
sudo make install

I installed all the correct certificates and configured firefox/mozilla using the tail end of THIS paper.

Everything works as expected.

Make sure to check out the following resources:
https://www.us.army.mil/suite/thread/37814 (DoD Employees Only)


http://symbolik.wordpress.com/?s=cac+linux


http://gentoo-wiki.com/HOWTO_DoD_CAC



And definitely check out the following:
http://ossg.disa.mil/projects/linuxcac/

[EricBaenen]

Some consolidated instructions for using a CAC card for machine login, screensaver, Firefox, etc. at https://help.ubuntu.com/community/CommonAccessCard

[troxy18]

Just my experience getting a CAC reader to work in Linux.

MY system specs, Lenovo Thinkpad T61 with built in lenovo integrated smartcard reader. Running Ubuntu 7.10 Gutsy Gibbon for x86-64 processor.

The Lenovo card reader was not supported in the version of libccid supported by Synaptic. a quick google search revealed that version 1.3.1-1 in the Hardy Heron repository does support my reader. (http://packages.ubuntu.com/hardy/libs/libccid) That required some newer versions of other dependencies than the 7.10 repositories had. I ended up pulling off a few other new versions of related packages.

Here are links to all the packages I installed
http://mirror.clarkson.edu/pub/ubunt....1-1_amd64.deb
http://mirror.clarkson.edu/pub/ubunt....4-2_amd64.deb
http://mirror.clarkson.edu/pub/ubunt....4-2_amd64.deb
http://mirror.clarkson.edu/pub/ubunt...11-1_amd64.deb
http://mirror.clarkson.edu/pub/ubunt....0-3_amd64.deb

Installing those 5 packages got the card reader working so where I could run pcsc_scan and get results and recognition when I plugged my cac card in. I set the security device in Firefox to be /usr/lib/pkcs11/libcoolkeypk11.so which was the coolkey install location.

At this point I tried quite a few things trying to get my certificates to work, restarting into vista and exporting my certificates there, then importing them into Firefox in Ubuntu was the first thing I tried. Then trying to do a cac login to ako in Ubuntu it would ask for the passcode, I would input it, and it would give the default AKO 403 error message for cac login. The error message prompted to register my cac certificates through a normal AKO login. I did that and it all started working through Firefox.

My suggestion to others is to get the card reader working where it will recognize your card, add the security device module to firefox, then see if you can register your cac card in ako and follow their steps to see if they work.

Let me know if these instructions are any help.

[HarleySteve]

I have followed this AWESOME walk-through

http://ubuntuforums.org/showthread.p...ght=cac+reader

I was diging through some stuff at work and found a PCMCIA Card Reader, SCR 201, Made by SCM Microsystems. I think the writeup and all the info I have found was based on a USB CAC Reader. Has anyone had any success with a PCMCIA or Internal CAC Reader? Or would any one have any ideas or where to start looking?

Thanks,
Steve