Chat now with support
Chat with Support

Safeguard Authentication Services 4.1.5 - Authentication Services for Smart Cards Administration Guide

One Identity Privileged Access Suite for Unix Introducing Authentication Services for Smart Cards Installing Authentication Services for Smart Cards Configuring Authentication Services for Smart Cards
Configuring the vendor’s PKCS#11 library Configuring the card slot for your PKCS#11 library Configuring PAM applications for smart card login Configuring certificates and CRLs
Testing Authentication Services for Smart Cards Troubleshooting

Enable debug for smart card login with PAM

The pam_vas_smartcard module supports an additional debug option that enables syslog to capture debugging information. This option is the same as the debug option supported by the pam_vas3 module. See the "Enabling Diagnostic Logging" section of the Authentication ServicesAdministration Guide located in the docs directory of the installation media for more information on how to configure syslog for this option.

Enable debug for the Authentication Services daemon

To enable additional debugging for the Authentication Services daemon

  1. Run the debug-level option in vas.conf, as follows:
    [vasd]
    debug-level=4

See the "Enabling Diagnostic Logging" section of the Authentication Services Administration Guide located in the docs directory of the installation media for more information on debugging vasd.

Troubleshooting vastool errors

The following sections describe symptoms and possible causes that you might encounter when using the vastool smartcard commands.

For information on other vastool commands see the Authentication Services Administration Guide located in the docs directory of the installation media.

Related Topics

vastool ERROR: no PKCS#11 library specified in vas.conf

vastool ERROR: Could not get symbol 'C_GetFunctionList'

vastool ERROR: invalid ELF header

vastool ERROR: cannot open shared object file

vastool ERROR: smart card is not present in slot

vastool WARNING: "Smart card user X is not unix enabled" issue

vastool ERROR: no PKCS#11 library specified in vas.conf

You encounter this error when you have not configured a PKCS#11 library.

To configure the PKCS#11 library

  1. Run the vastool smartcard configure pkcs11 lib command.
Related Documents