Hi David,
While you cannot use a usb smart card reader today, you can use the
Smart Card reader in SR to use your CAC. The current stable version of
rdesktop does not support smart cards, but you can compile the cvs code
to get smart card support.
Citrix supports smart cards as well. Depending on the version of
Citrix, you may have to run a util called scconfig to enable certain AC
features. Later versions of Citrix (I think 4, not sure if 3 fixed
this) fixed the need to do any config of the smart card channel.
Of course you'll have to install AC for CAC on the Terminal Server (it
is supported by AC to deploy on TS).
You'll also want to make sure that you install the latest version of
SUNWsrcbp which you can get here:
http://www.sun.com/download/products.xml?id=42c5d3d9
David Partrington wrote:
All,
I was just informed that DoD has now directed Two-Factor
Authentication (CAC Logon) onto the unclassified Networks NLT July 06. I
have 500 Sun Rays on this network running Sparc Solaris 9, With SRSS 3.1
serving Solaris and Windows Desktops. For Windows Desktops I use Rdesktop.
DOD uses Active Card Gold Software for CAC PKI authentication, The CAC Card
is a Smart Card. I have been told that Active Card Gold is not a problem on
Solaris, however I don't believe I can do a USB CAC Reader pass through with
Rdesktop to the Windows 2003 Terminal Server Session. Does anyone know if
this is possible? I have also been told that Citrix is capable of using CAC
Cards; however this will raise the cost per seat (DTU) significantly. The
other option would be to use Tarantella, which is now owned by SUN. So that
is the background, I would appreciate any idea's or comments on this
subject.
Thanks
David Partington
Computer Operations Center
Digital Training Office
Ft Huachuca
520-533-6184
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
