Re: [opencryptoki-users] error initializing token

[Klaus H. K. <kl...@li...>]

On Tue, 2010-07-20 at 11:11 -0500, Kent Yoder wrote:
> Hmm, there are really only 2 reasons why that should fail...  Does
> `id` show your user in the pkcs11 group?  Sometimes that requires a
> logout/login to take effect?

Other things to try:

 -re-run pkcs11_startup, check
%{localstatedir}/lib/opencryptoki/pk_config_data, make sure the TPM
token is in there.
 -kill pkcsslotd, remove possible shared memory leftovers with ipcrm,
restart pkcsslotd
 -check if libopencryptoki.so, libpkcs11_tpm.so.0 and all of the
trousers shared libraries are present in the loader cache (ldconfig -p)

Also, are you able to run pkcsconf? What is your 'pkcsconf -t' output?

Are you running a released version or from git? If everything else
fails, give me 10 minutes and try pulling from the 'opencryptoki-next'
branch. I'm committing a couple of fixes right now.

Thanks,

 -Klaus

> 2010/7/20 Alexander Loukissas (aloukiss) <alo...@ci...>:
> > Yup, there's a message saying:
> >
> > openCryptokiModule[2051]: api_interface.c:3397 Cannot Attach to Shared Memory
> >
> > This appears each time I run the tpmtoken_init command.
> >
> > Alex
> >

-- 
Klaus Heinrich Kiwi             | kl...@br... 
IBM LTC Security Development    | http://blog.klauskiwi.com
http://www.ibm.com/linux/ltc    | http://www.ratliff.net/blog