search

Fedict / eid-mw

eID Middleware (main repository)
GNU Lesser General Public License v3.0
202 stars 78 forks source link

Cannot read eID Carddate when user logins in on his PC using a AZURE Domein account. #100

Closed SGE66 closed 4 years ago

SGE66 commented 4 years ago

Hi, we encounter a problem with an AZURE Domain account similar to https://github.com/Fedict/eid-mw/issues/57.

Environment: Windows 10 Build 1909 Belgium e-ID middleware 4.4.4 (build 3838) Laatste versie Belgium e-ID viewer 4.4.14 (build 4135) Laatste versie Following error occurs when trying to read eIDCard: ERROR: Cannot Read Carddata: Open Slot Failed.

This problem ONLY occurs when the user logins in on his PC using a AZURE Domein account. When a LOCAL account is used there is no issue.

Anyone any ideas whether or not this is the same problem as this issue (Windows Hello for Business blocks cardreader) ? Regards, Stefan

Frederikus commented 4 years ago

Hello,

Can you try again with the future releases of the eID middleware and eID Viewer? https://eid.belgium.be/en/future-versions-eid-software-and-eid-viewer

They handle the issues we had with some (virtual) non-eID cards. So if the issues are the same, the releases 4.4.23 and 4.4.24 should resolve them.

Wkr, Frederik

On Tue, Jan 7, 2020 at 9:03 AM SGE66 notifications@github.com wrote:

Hi, we encounter a problem with an AZURE Domain account similar to #57 https://github.com/Fedict/eid-mw/issues/57.

Environment: Windows 10 Build 1909 Belgium e-ID middleware 4.4.4 (build 3838) Laatste versie Belgium e-ID viewer 4.4.14 (build 4135) Laatste versie Following error occurs when trying to read eIDCard: ERROR: Cannot Read Carddata: Open Slot Failed.

This problem ONLY occurs when the user logins in on his PC using a AZURE Domein account. When a LOCAL account is used there is no issue.

Anyone any ideas whether or not this is the same problem as this issue (Windows Hello for Business blocks cardreader) ? Regards, Stefan

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Fedict/eid-mw/issues/100?email_source=notifications&email_token=AA4FYJCLUTG5QBKO3IPWZETQ4QZNXA5CNFSM4KDUEQX2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4IENNMJQ, or unsubscribe https://github.com/notifications/unsubscribe-auth/AA4FYJAU4HJ2KQLXA6HAAZLQ4QZNXANCNFSM4KDUEQXQ .

BMI81 commented 4 years ago

Hi,

I have removed the older version of the software and installed the new releases like mentioned!

Unfortunally the error keeps the same "ERROR: Cannot Read Carddata: Open Slot Failed."

We have try'd 2 card readers: 1 build in Alcor card reader from HP and an external. Both give the same problem!

Kind Regards Bjorn

Frederikus commented 4 years ago

Can our eID Viewer read out the eID card? (in case not, what errors does it return?)

Which application have you been testing with?

Does the setup with the Azure login works for other users? As our service desk has seen issues with workgroups that were not given enough permissions to run the smart card services as the correct account, workgroup users that were not allowed to read certain sections of the registry (Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Cryptography\Calais\SmartCards),.. So in that case you'd beter contact them.

On Tue, Jan 7, 2020 at 9:56 AM BMI81 notifications@github.com wrote:

Hi,

I have removed the older version of the software and installed the new releases like mentioned!

Unfortunally the error keeps the same "ERROR: Cannot Read Carddata: Open Slot Failed."

We have try'd 2 card readers: 1 build in Alcor card reader from HP and an external. Both give the same problem!

Kind Regards Bjorn

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/Fedict/eid-mw/issues/100?email_source=notifications&email_token=AA4FYJFS43EQKAS4T3X3X2TQ4Q7UFA5CNFSM4KDUEQX2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEIIFI4Q#issuecomment-571495538, or unsubscribe https://github.com/notifications/unsubscribe-auth/AA4FYJDYBJV7NQRFQAB2PCLQ4Q7UFANCNFSM4KDUEQXQ .

BMI81 commented 4 years ago

Hi Frederikus,

The eID viewer can indeed read the ID card.

Other Azure users share the same problem!

The problem is that when we are try'ing to use the eID reader with the Betrust token signing plugin we get this error!

I already contacted the supplier to look up to this issue! So we dont know if it is problems with the eID software or plugin!

Keep you posted

Regards

SGE66 commented 4 years ago

Hi All,

we noticed that CK_ULONG slot_count = 0 line triggers the error:

// retrieve the number of slots (cardreaders) found //set first parameter to CK_FALSE if you also want to find the slots without a card inserted CK_ULONG slot_count = 0; retVal = (pFunctions->C_GetSlotList) (CK_TRUE, 0, &slot_count);

An guess why this happens and how to solve this ?

Regards,

Frederikus commented 4 years ago

Hello,

Did you get any response from Betrust?

Or if you can get a pkcs#11 log? https://eid.belgium.be/en/technical-documentation#7483

Frederikus commented 4 years ago

No logging or feedback was received, closig this for now. Feel free to re-open when you have further info or can provide the logs (preferably with the latest future-release build from https://eid.belgium.be/en/future-versions-eid-software-and-eid-viewer).