I seting up fedora (24), using wiki.
https://fedorahosted.org/sssd/wiki/DesignDocs/SmartcardAuthenticationTestingWithAD
Every thing going ok, and i can use login and password. But if i'll try to use
smart card, nothing hapent in gdm logon screen.
pkcs11-tool --module my_pkcs11_module.so --slot 0
Thank's for your reply.
If it could help, i cat setup CentOS in same configuration.
It turns out that authentication already worked. I just didn't assume that
pam_sss doesn't enter user name as it does pam_pkcs11.
It works so:
1. insert usb token
2. select user name on the gdm screen (how to dis
> On Wed, Sep 21, 2016 at 12:58:52PM -0000, niger niger wrote:
>
> Please note that gdm uses the dconf profile 'gdm' with is configured as:
>
> # cat /usr/share/dconf/profile/gdm
> user-db:user
> file-db:/usr/share/gdm/greeter-dconf-defaults
From my host
# cat /us
!
after install last update (thought gnome-app-install, 22-23/09/2016)
disable-user-list starting to work. I'm nothing change on system configuration.
$ sudo -u gdm DCONF_PROFILE=gdm dconf read
/org/gnome/login-screen/disable-user-list true
___
sssd-u
Hello Sumit.
I'm just ping you, about pkinit test package for Fedora 24.
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
I have started testing, however I was loaded another tasks at work now.
Testing will be slowed down.
Many thanks to you, for help.
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fed
Hello Sumit.
Now im back to task!
I see sssd already have new release, to continue test i need install version
that you send me before, or new release already have function to reproduce my
tests?
___
sssd-users mailing list -- sssd-users@lists.fedorahos
ok, but i can't find how download any files from link you send me.
http://koji.fedoraproject.org/koji/taskinfo?taskID=15847512 .
___
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedora
Now files downloadable, thanks.
One more question. What you meant under "If you already have a working pkinit
configuration not additional configuration is needed"?
I can run kinit, enter the password and to receive kerberos ticket, but can't
get ticket using token. Is that enough, or i need to s