I use thinlinc to connect to a headless server in the same physical room. I recently got a smartcard and was trying to use it LOCALLY. For a moment I had forgotten I was using Thinlinc. I spent hours and hours trying to figure out why I could read the smartcard ceritificates as root user, but not as…

Hi @martin - To summarize my original post. I am trying to use a smart card that is connected to the SERVER while I am logged in via the thinlinc client. The thinlinc server installation interferes with using that when logged in by thinlinc client. It has nothing to do with the client side setting.

That’s not a use-case I’ve heard of before, so not sure what’s going on really. But it sounds as a permission problem. Since you’re logged in remotely, your user will probably not have sufficient privileges to access local attached hardware. Polkit will most likely refuse some access. Have you tried…

I just gave it a go, and I believe what you’ll need to do are: echo "unset LD_LIBRARY_PATH" >> ~/.bash_profile Then create the polkit allow rules: # cat >> /etc/polkit-1/rules.d/00-allow-smartcard.rules<<EOF polkit.addRule(function(action, subject) { if (action.id == "org.debian.pcsc-lite.acc…

I had already made those polkit changes (and also added polkit logging) when I realized something was sitting between the smartcard and my user account. The polkit rules were never even being hit. That is when I realized there was PCSCTUN_SERVER environment variable that was unexpected. I believe th…

Sorry, I meant to add to check for any local LD_LiBRARY_PATH first. On my test system there was only path to /opt/thinlinc… added to it. It should be sufficient to remove /opt/thinlinc from LD_LIBRARAY_PATH

Thanks for mentioning the LD_LIBRARY_PATH. Rather than modify that and potentially disable other features (pulse, etc), I ended up doing the following commands: cd /opt/thinlinc rm lib64/libpcsclite.so lib64/libpcsclite.so.1 lib64/libpcsctun.so lib/libpcsctun.so lib/libpcsclite.so lib/libpcsclite.s…

Need a way to disable smartcard on server

ThinLinc

martin 17 February 2023 07:57 2

Hello @kbass

I’m not sure if I understand what problem you’re facing, and why disabling smart card redirection would solve it?

To disable it, you can uncheck ‘Smart Card Readers’ in ThinLinc Client under ‘Local Devices’.

Regards,
Martin

Topic		Replies	Views
How to set up authentication in ThinLinc with PKCS #15 smart cards Knowledge Base linux , thinlinc , authentication , smartcard , tutorial	1	1376	9 April 2025
Challenges with Smart Card Setup on New ThinLinc Install ThinLinc linux , thinlinc , tlclient	15	1349	3 July 2023
Smartcard export no longer working ThinLinc tlclient , yubikey , smartcard	17	835	14 February 2024
"You are not authorized to connect to this server" Error when Inserting Smart Card ThinLinc tlserver	1	843	22 June 2023
Observation: Smart Card Not Detected in TL Client on Thin Client - "No smart card available" Not ThinLinc	2	746	28 June 2023

Need a way to disable smartcard on server

Related topics