[SSSD-users] Please help me, setting up smartcard auth against Active Directory

2016-09-20 Thread niger niger
I seting up fedora (24), using wiki. https://fedorahosted.org/sssd/wiki/DesignDocs/SmartcardAuthenticationTestingWithAD Every thing going ok, and i can use login and password. But if i'll try to use smart card, nothing hapent in gdm logon screen. pkcs11-tool --module my_pkcs11_module.so --slot 0

[SSSD-users] Re: Please help me, setting up smartcard auth against Active Directory

2016-09-21 Thread niger niger
Thank's for your reply. If it could help, i cat setup CentOS in same configuration. It turns out that authentication already worked. I just didn't assume that pam_sss doesn't enter user name as it does pam_pkcs11. It works so: 1. insert usb token 2. select user name on the gdm screen (how to dis

[SSSD-users] Re: Please help me, setting up smartcard auth against Active Directory

2016-09-21 Thread niger niger
> On Wed, Sep 21, 2016 at 12:58:52PM -0000, niger niger wrote: > > Please note that gdm uses the dconf profile 'gdm' with is configured as: > > # cat /usr/share/dconf/profile/gdm > user-db:user > file-db:/usr/share/gdm/greeter-dconf-defaults From my host # cat /us

[SSSD-users] Re: Please help me, setting up smartcard auth against Active Directory

2016-09-23 Thread niger niger
! after install last update (thought gnome-app-install, 22-23/09/2016) disable-user-list starting to work. I'm nothing change on system configuration. $ sudo -u gdm DCONF_PROFILE=gdm dconf read /org/gnome/login-screen/disable-user-list true ___ sssd-u

[SSSD-users] Re: Please help me, setting up smartcard auth against Active Directory

2016-09-27 Thread niger niger
Hello Sumit. I'm just ping you, about pkinit test package for Fedora 24. ___ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

[SSSD-users] Re: Please help me, setting up smartcard auth against Active Directory

2016-09-30 Thread niger niger
I have started testing, however I was loaded another tasks at work now. Testing will be slowed down. Many thanks to you, for help. ___ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fed

[SSSD-users] Re: Please help me, setting up smartcard auth against Active Directory

2016-10-21 Thread niger niger
Hello Sumit. Now im back to task! I see sssd already have new release, to continue test i need install version that you send me before, or new release already have function to reproduce my tests? ___ sssd-users mailing list -- sssd-users@lists.fedorahos

[SSSD-users] Re: Please help me, setting up smartcard auth against Active Directory

2016-10-21 Thread niger niger
ok, but i can't find how download any files from link you send me. http://koji.fedoraproject.org/koji/taskinfo?taskID=15847512 . ___ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedora

[SSSD-users] Re: Please help me, setting up smartcard auth against Active Directory

2016-10-21 Thread niger niger
Now files downloadable, thanks. One more question. What you meant under "If you already have a working pkinit configuration not additional configuration is needed"? I can run kinit, enter the password and to receive kerberos ticket, but can't get ticket using token. Is that enough, or i need to s