Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: On Fri, Mar 10, 2017 at 01:39:27PM +0200, Alexander Bokovoy wrote: On pe, 10 maalis 2017, Sumit Bose wrote: > On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > > On pe, 10 maalis 2017, Sumit Bose wrote: > > > Hi, > > > > > > with the re

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
On Fri, Mar 10, 2017 at 01:39:27PM +0200, Alexander Bokovoy wrote: > On pe, 10 maalis 2017, Sumit Bose wrote: > > On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > > > On pe, 10 maalis 2017, Sumit Bose wrote: > > > > Hi, > > > > > > > > with the recent addition of PKINIT support

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: On pe, 10 maalis 2017, Sumit Bose wrote: > Hi, > > with the recent addition of PKINIT support there is now a second method > available to Smartcard authentication besides local authenticat

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
On Fri, Mar 10, 2017 at 11:58:25AM +0200, Alexander Bokovoy wrote: > On pe, 10 maalis 2017, Sumit Bose wrote: > > Hi, > > > > with the recent addition of PKINIT support there is now a second method > > available to Smartcard authentication besides local authentication. > > > > I was about to add

Re: [Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Alexander Bokovoy
On pe, 10 maalis 2017, Sumit Bose wrote: Hi, with the recent addition of PKINIT support there is now a second method available to Smartcard authentication besides local authentication. I was about to add some sssd.conf option which can control the fallback to local authentication if PKINIT fail

[Freeipa-devel] [RFC] Smartcard authentication with PKINIT and local authentication

2017-03-10 Thread Sumit Bose
Hi, with the recent addition of PKINIT support there is now a second method available to Smartcard authentication besides local authentication. I was about to add some sssd.conf option which can control the fallback to local authentication if PKINIT fails. Currently there is only a fallback to lo