• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

"pcscd PC/SC Smart Card Daemon" ?

Scheduled Pinned Locked Moved General pfSense Questions
70 Posts 22 Posters 32.1k Views 19 Watching
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F Offline
    fireodo @Gertjan
    last edited by Aug 26, 2021, 3:01 PM

    @gertjan said in "pcscd PC/SC Smart Card Daemon" ?:

    Create a patch.

    Done

    Copy paste the code jimp showed (see above)

    Done

    Give it a description - like the URL of the forum thread.

    Done

    Now : Ok - Test - and Apply.

    APPLY is missing ... Hmmmm

    😟

    Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
    SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
    pfsense 2.8.0 CE
    Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

    S 1 Reply Last reply Aug 26, 2021, 3:09 PM Reply Quote 0
    • S Offline
      SteveITS Rebel Alliance @fireodo
      last edited by Aug 26, 2021, 3:09 PM

      @fireodo said in "pcscd PC/SC Smart Card Daemon" ?:

      APPLY is missing

      Did you Fetch (download) it? (docs) Or, if it doesn't show Apply it might not have been entered correctly, and the package is smart enough to not let you break things. The very first one I did I accidentally pasted in he wrong URL and ran into that.

      If nothing else you can just stop the service (Status/Services page) until 21.09 is out. Presumably your router won't restart that often...

      Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
      Upvote 👍 helpful posts!

      F 1 Reply Last reply Aug 26, 2021, 3:18 PM Reply Quote 0
      • F Offline
        fireodo @SteveITS
        last edited by Aug 26, 2021, 3:18 PM

        @steveits said in "pcscd PC/SC Smart Card Daemon" ?:

        Presumably your router won't restart that often...

        Indeed. I will wait ... 🙂

        Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
        SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
        pfsense 2.8.0 CE
        Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

        1 Reply Last reply Reply Quote 0
        • S Offline
          stephenw10 Netgate Administrator
          last edited by Aug 26, 2021, 3:56 PM

          Indeed if it doesn't show 'apply' that means it cannot be applied.

          What are version are you trying to patch?

          You are using this commit ID in the patch? afcc0e9c97c1993ae6b95f886665fcb4375d26c7

          Steve

          F 1 Reply Last reply Aug 26, 2021, 4:04 PM Reply Quote 0
          • F Offline
            fireodo @stephenw10
            last edited by Aug 26, 2021, 4:04 PM

            @stephenw10 said in "pcscd PC/SC Smart Card Daemon" ?:

            What are version are you trying to patch?

            2.5.2

            You are using this commit ID in the patch? afcc0e9c97c1993ae6b95f886665fcb4375d26c7

            Yes.

            Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
            SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
            pfsense 2.8.0 CE
            Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

            1 Reply Last reply Reply Quote 0
            • S Offline
              stephenw10 Netgate Administrator
              last edited by Aug 26, 2021, 4:39 PM

              Hmm, that should work, I just retested it to be sure. The only reason it wouldn't is if you already have some other changes to the files it's trying to patch.

              Steve

              F 1 Reply Last reply Aug 26, 2021, 4:41 PM Reply Quote 1
              • F Offline
                fireodo @stephenw10
                last edited by fireodo Aug 26, 2021, 5:29 PM Aug 26, 2021, 4:41 PM

                @stephenw10 said in "pcscd PC/SC Smart Card Daemon" ?:

                The only reason it wouldn't is if you already have some other changes to the files it's trying to patch.

                You're probably right - its not so important for me ...

                Edit1: Found the culprit (its me) - I changed the rc.bootup manually with the modifications that came with the patch some time before ... 🤓 👋

                Edit2: I revert the changes I made and now the Patch applies correctly.

                Sorry!

                Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                pfsense 2.8.0 CE
                Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                1 Reply Last reply Reply Quote 1
                • O Offline
                  ozone @jimp
                  last edited by Nov 7, 2021, 5:31 AM

                  @jimp Just noting that saving the page with the newly present box unchecked was enough to stop the service. It did not require a reboot.

                  1 Reply Last reply Reply Quote 0
                  • D Offline
                    dereitz
                    last edited by Nov 19, 2021, 3:57 AM

                    I was investigating why my pfsense box was using over 6GB of "laundry memory" and additionally was using swap space and finally ran across this thread. Sure enough, pcscd was running on my box and was the culprit. Thanks to this thread, I was able to disable the service and immediately my memory usage went back to normal!

                    Another great catch by the community.. Thank you all!
                    -David

                    1 Reply Last reply Reply Quote 0
                    • S Offline
                      SjM
                      last edited by SjM Nov 24, 2021, 12:12 AM Nov 24, 2021, 12:09 AM

                      This is interesting.

                      2.5.2-RELEASE (amd64)
                      built on Fri Jul 02 15:33:00 EDT 2021
                      FreeBSD 12.2-STABLE

                      pfBlockerNG was starting cron jobs which didn't complete to the extent that it was consuming 100% of CPU time. Couldn't figure out what was going awry. I came across this discussion and saw the process pcscd was running on my system. After I killed pcscd the system is behaving as it should on about 4-7% CPU utilization!

                      Weird.

                      Next thing is how do I apply the patch to stop pcscd loading at startup? I don't seem to have the option to apply a patch under the system menu of pfSense.

                      M 1 Reply Last reply Nov 24, 2021, 12:13 AM Reply Quote 0
                      • M Offline
                        mcury Rebel Alliance @SjM
                        last edited by Nov 24, 2021, 12:13 AM

                        @sjm Install this package:

                        a1578b45-5ec6-4504-b074-51378a178fd9-image.png

                        Then apply the patch afcc0e9c97c1993ae6b95f886665fcb4375d26c7

                        dead on arrival, nowhere to be found.

                        S D 3 Replies Last reply Nov 24, 2021, 12:20 AM Reply Quote 3
                        • S Offline
                          SjM @mcury
                          last edited by Nov 24, 2021, 12:20 AM

                          @mcury laughing just discovered the very thing. 👍

                          1 Reply Last reply Reply Quote 0
                          • S Offline
                            SjM @mcury
                            last edited by Nov 24, 2021, 12:33 AM

                            @mcury how many path levels do I need to strip? 1??

                            M 1 Reply Last reply Nov 24, 2021, 12:34 AM Reply Quote 0
                            • M Offline
                              mcury Rebel Alliance @SjM
                              last edited by Nov 24, 2021, 12:34 AM

                              @sjm I left everything default settings..

                              41c792cd-0076-44d1-ac94-f64ed2b5ecac-image.png

                              dead on arrival, nowhere to be found.

                              S 1 Reply Last reply Nov 24, 2021, 12:44 AM Reply Quote 2
                              • S Offline
                                SjM @mcury
                                last edited by Nov 24, 2021, 12:44 AM

                                @mcury pfSense is again purring along like it should.

                                Many thanks!

                                1 Reply Last reply Reply Quote 1
                                • B Offline
                                  bluepill
                                  last edited by Jan 11, 2022, 12:41 PM

                                  Thanks for this thread - like others it has helped me a lot.

                                  1 Reply Last reply Reply Quote 0
                                  • D Offline
                                    drees @mcury
                                    last edited by Jan 21, 2022, 12:39 AM

                                    Thanks, applying the patch and stopping/started IPsec fixed the issue for me.

                                    Not sure how long it was going on, but I found two different pfSense boxes (a SG-1100 and SG-3100) with a site-to-site IPsec VPN with this issue. On the SG-3100, we were seeing weird delays/pauses in OpenVPN traffic. Logging in we saw high CPU load and found the characteristic large number of bzip2 processes compressing ipsec logs. On the SG-1100, didn't really notice anything, but did find that the snmp daemon had died.

                                    1 Reply Last reply Reply Quote 0
                                    • P Offline
                                      PeteRage
                                      last edited by Jan 31, 2022, 10:31 PM

                                      Ran into this problem also. Disabled the daemon. My next step is to establish site-to-site ipsec tunnel. Is this pcscd required to establish an ip-sec tunnel?

                                      S 1 Reply Last reply Jan 31, 2022, 10:36 PM Reply Quote 0
                                      • S Offline
                                        SteveITS Rebel Alliance @PeteRage
                                        last edited by Jan 31, 2022, 10:36 PM

                                        @peterage said in "pcscd PC/SC Smart Card Daemon" ?:

                                        Is this pcscd required to establish an ip-sec tunnel

                                        No.

                                        Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                        When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                                        Upvote 👍 helpful posts!

                                        1 Reply Last reply Reply Quote 0
                                        • chudakC Offline
                                          chudak
                                          last edited by Feb 15, 2022, 5:28 PM

                                          "pcscd PC/SC Smart Card Daemon" is gone in 2.6.0!!!

                                          jimpJ 1 Reply Last reply Feb 15, 2022, 5:30 PM Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            [[user:consent.lead]]
                                            [[user:consent.not_received]]