there is very similar thread on this list - "p11_child doesn't use 2nd slot if 1st slot is empy"
Can it happen your setup is similar, i.e. 1st removable slot on your reader is seen as empty?

On Tue, Mar 16, 2021 at 5:21 PM Rudi Dayan <rudida247@gmail.com> wrote:

Thanks for your response!
Yes, It worked when I used kinit and ksu commands.

In addition, I think krb5_child proccess could access the Smartcard beacuse it prompted this log:

(Sun Feb 21 13:45:52 2021) [[sssd[krb5_child[155525]]]] [answer_pkinit] (0x4000): [0] Identity [PKCS11:module_name=/lib/libsadaptor.so:slotid=2:token=Crypto Token] flags [0]
(Sun Feb 21 13:45:52 2021) [[sssd[krb5_child[155525]]]] [answer_pkinit] (0x4000): Setting pkinit_prompting.
(Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x4000): sss_krb5_prompter name [(null)] banner [(null)] num_prompts [1] EINVAL.
(Sun Feb 21 13:45:59 2021) [[sssd[krb5_child[155548]]]] [sss_krb5_prompter] (0x4000): Prompt [0][Crypto Token                              PIN].

Can you suggest additionals possible solutions?

Thank you,
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure