On Sep 12, 2008, at 8:50 AM, Alex Green wrote:
Has anyone implemented Smartcard authentication on Solaris 10 Update
5?
Considering that it now ships with OCF as well as PCSC Lite, I’m not
really
sure what needs to be to get it to work.
OCF has shipped with Solaris since we integrated it in Solaris 8. It
has largely been dormant
since then and people wanting to do smartcard authentication on
Solaris and on Sun Ray
will typically install our PC/SC-lite packages that provide
applications with the same PC/SC-lite
API that they see on other UNIX (and UNIX-like) flavors that install
PC/SC-lite from the MUSCLE
project.
The PC/SC-lite release notes tell you how to handle the removal of
several of the OCF
packages that ship with Solaris 10 so that you can do a clean install
of PC/SC-lite without
having file clobbering issues.
We recently updated PC/SC-lite on our external download center and
I'll get the correct URL
and post it here.
Once you install PC/SC-lite, you will still need to install some
middleware that knows how
to talk to he particular card that you want to use, and which would
come with components
such as a PAM module (for login user identification and
authentication), a PKCS#11 module
for use with browsers and other software that knows how to use a
PKCS#11 provider, and
usually some utilities that will allow you to provision and manage the
cards over their lifecycle.
You will also likely need to be prepared to have some sort of
framework in place to issue
certificates that can be put onto the cards, although it is possible
to do other than certificate
based user identification and authentication, using shared secret keys
for example or even
just doing a simple PN challenge to the card. In any case, PC/SC-lite
does not provide any
of this middleware functionality, so you will have to buy it from some
third party, use something
like OpenSC and friends, or write it yourself.
Especially as xscreensaver has dependencies on the OCF packages that
are
shipped.
Do you mean package dependancies or actual library dependancies?
Any help would be great,
Hope this helps.
mike
----
Thanks,
Alex
Mit freundlichen Grüßen / Kindest regards
Alexander Green
IES A&E / Global UNIX Engineer
Group Technology & Operations
Deutsche Bank AG
6/8 Bishopsgate, London, EC2N 4DA, United Kingdom
Tel: +44 20 754 70903
Fax: +44 20 754 56567
Mob: +44 7506 713 960
-------------------------------------------------------------------------------
Deutsche Bank Aktiengesellschaft mit Sitz in Frankfurt am Main, HRB
Nr. 30 000
Amtsgericht Frankfurt am Main,
Vorsitzender des Aufsichtsrates: Clemens Börsig, Vorstand: Josef
Ackermann
(Vorsitzender), Hugo Bänziger,
Tessen von Heydebreck, Anthony Di lorio, Hermann-Josef Lamberti,
Umsatzsteuer
ID Nr.: DE114103379
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
