On Tue, Mar 16, 2010 at 3:33 PM, Douglas E. Engert <[email protected]> wrote:

>
>
> Todd Denniston wrote:
>
>> Douglas E. Engert wrote, On 03/12/2010 10:48 AM:
>>
>>>
>>> Anderson Goulart wrote:
>>>
>>>> Hello,
>>>>
>>>> I know this question is on the archives, but I could not find any
>>>> solution for this yet...
>>>>
>>>> I am trying to authenticate a user with a smartcard. I am using
>>>> OpenSuse 11 with GDM 2.24. Everything is working, but not quite as I
>>>> would like to.
>>>>
>>>>
>>  What I am trying to do is deal with insertion and removing the
>>>> smartcard. When I insert the smartcard I would like GDM to show the
>>>> PIN dialog without pressing ENTER. And if I remove, GDM should show
>>>> the Username/Password dialog again.
>>>>
>>> I like this, but PAM today gets in the way.
>>>
>>>
>> we're talking about
>> URL         : ftp://ftp.gnome.org/pub/GNOME/sources/gdm
>> ... the thing you see while you try to log in (also fronts
>> RHEL/CentOS/Fedora boxes), right?
>>
>>
> Yes and any other vendor's GDM like the Ubuntu (2.28) or Solaris. I don't
> know what
> the Solaris version is based on. All of thes can use PAM.
>
> But in addition to GDM you will need to look at any screen lock programs,
> as you
> will want to unlock with the smart card too. Do the screen lock programs
> have the
> same pre-PAM detection of smart cards?
>
>
>
>  for me, gdm has worked in the way Goulart wants:
>> on fedora since circa Fedora 8
>> on CentOS since at or before CentOS 5.3
>>
>> the current gdm on CentOS 5 is a heavily patched 2.16.0.
>> the current gdm on Fedora 12 is a patched  2.28.2.
>> There may be other "helpers" in these distros that I have not looked for.
>>
>>
Thanks for all comments... I have tried the Fedora 12 Patch in opensuse
without success. They did a lot of changes and the some libhal function
dependencies could not be solved. I get stucked here.

I will further look on the CentOS and Ubuntu patches to see if they can do
it easier than what i've tried. I was thinking something simliar to those
patches, but in a simple way (I don't know if it will work - please comment)

Use card_eventmgr daemon to send Dbus messages when the card is
removed/inserted (a patch is needed here). Create a thread in gdm that would
listen to dbus and show PIN dialog windows when the card is inserted and
show username/password dialog otherwise (this would be difficult, but is it
hard to put this kind of code in gdm? Any gdm expert knows the constraints
of it?).



> perhaps the patches for smart cards on one of those could be bent to work
>> with the GDM in OpenSuse.
>>
>>
Well... a lot of changes were made in 2.28 since 2.24. It is not easy to
apply the patch. But I am trying...


thanks, global



> Hope this helps.
>>
>
> --
>
>  Douglas E. Engert  <[email protected]>
>  Argonne National Laboratory
>  9700 South Cass Avenue
>  Argonne, Illinois  60439
>  (630) 252-5444
> _______________________________________________
> Muscle mailing list
> [email protected]
> http://lists.drizzle.com/mailman/listinfo/muscle
>
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to