Re: MUSCLE Linux Login with RSA SmartCards

2001-06-06 Thread Ludovic Rousseau
On Mon, Jun 04, 2001 at 12:57:20PM -0700, David Corcoran wrote: Hello, You can't use pcsc-lite-0.9.1 for remote use of the resource manager. I wanted to create the core package as local only. I'm working on an RPC like service that sits atop the local service which will export the PC/SC

Re: MUSCLE Linux Login with RSA SmartCards

2001-06-06 Thread Erwann ABALEA
On Wed, 6 Jun 2001, Ludovic Rousseau wrote: On Mon, Jun 04, 2001 at 12:57:20PM -0700, David Corcoran wrote: Hello, You can't use pcsc-lite-0.9.1 for remote use of the resource manager. I wanted to create the core package as local only. I'm working on an RPC like service that sits

Re: MUSCLE Linux Login with RSA SmartCards

2001-06-06 Thread Jim Rees
For accessing remote computers (which the original query was about) something like ssh or secure telnet using smart card based keys for authentication would be more appropriate. Of course what you really want is for the session to be secure all the way to the card, not just to the

Re: MUSCLE Linux Login with RSA SmartCards

2001-06-06 Thread Carlos Prados
Hi, I think the PCSC is good enough if it enables access to the local smartcard to local proceses, and verifies that the user has UNIX permission to use the smartcard reader (for instance if /tmp/.pcsctx anc /tmp/.pcscrx are accessibe to the user). For remote authentication, a client/server

Re: MUSCLE Linux Login with RSA SmartCards

2001-06-06 Thread David Corcoran
Definitely. The interface exported must be a subset of the available functionality or else someone could write a worm which does a Verify Key function incorrectly and blocks cards where services are available. A signature function must be carefully exported and authenticated to so it does not