On Wed, 6 Oct 2004, [ISO-8859-1] Josep Mon�s Teixidor wrote: > Hello, > > I've successfully tried smart card login using Mario Strasser's PKCS#11 > pam module. It works ok. > > On GDM it asks for a username, and then it asks pam, which makes gdm ask > the password for the token. > > On XDM it asks for a username and a password (the latter is taken as the > pin to the card). > > But now i'd prefer something more specific to smart card environment. It > would be wonderful if the screen showed a message like "insert your > card" and reacted to it. > > I don't know much about pam, but it seems to me that a module could be > made only for that or even modify strasser's module to do this. The only > thing I'm not sure of is that gdm and xdm seem to ask for a username > before even looking to pam configuration, so perhaps they need to be > patched. Does anyone that knows this better agree? > > It would also be good that module just took username from the > certificate in the card, instead of asking for it and then matching a > certificate. From a quick look at the code I see that this can't be done > as it is now.
In many circumstances, it won't work. 1. User has multiple accounts and will need some way to select which one to use. 2. The certificate (at least in the DoD CAC case) has no username other than the DN name, which doesn't match anybodys idea of a login name. > Does anybody already done this? Any ideas? > > TIA, > > -- > Josep Mon�s > [EMAIL PROTECTED] > C3PO, S.L. ------------------------------------------------------------------------- Jesse I Pollard, II Email: [EMAIL PROTECTED] Any opinions expressed are solely my own. _______________________________________________ Muscle mailing list [EMAIL PROTECTED] http://lists.drizzle.com/mailman/listinfo/muscle
