On Fri, 20 Oct 2006, Greg Hennessy wrote:

Is anyone aware of a version of ssh or ssh-agent so that I can
configure that all incoming ssh connections must use a CAC?


None that I know of.

You also likely don't want to do that anyway.

1. a users who make a primary connection to a server.
   You MIGHT be able to verify a certificate, but I don't think
   you can confirm that a CAC was used...

2. That user now logged on on the remote server wants to copy
   a file to a third server...

   No CAC reader available on that first server... so the connection
   from the first server to the second cannot be done using a CAC.

   A delegated CERT generated from a CAC might be available, but no
   direct CAC use is possible.

Thanks
Greg Hennessy

_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

-------------------------------------------------------------------------
Jesse I Pollard, II
Email: [EMAIL PROTECTED]

Any opinions expressed are solely my own.

_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to