On 12/08/10 13:55, Karl Rossing wrote:
On 10-09-13 06:25 PM, Ken Mandelberg wrote:
As Jorg Barfurth points out, the reason that smartcard cloining didn't work for
me on Ubuntu is at least that the hotdesk pam module was not installed.
In fact from
http://wiki.sun-rays.org/index.php/SRSS_4.2_on_Ubuntu_9.10_%28i386,_amd64%29
"comment out all pam entries in /etc/pam.d/gdm-2.20 referring to
"pam_sunray_hotdesk.so" as hotdesking seems to be currently broken "
Has anyone made Hotdesking work on Ubuntu?
I'm wondering if you got hotdesking to work under ubuntu?
I did find
http://www.filibeto.org/pipermail/sunray-users/2010-January/014506.html and
tried that but it's not working for me yet.
This is an incorrect use of the term "hotdesking". Hotdesking means to be able
to access your session from different Sun Rays. On Linux this is currently only available
when you use smartcards, because non-smartcard sessions are not mobile. On Solaris we
support Non-SmartCard Mobility, which allows you to access your session on any Sun Ray
simply by authenticating (e.g. entering your username and password).
If SRS works at all, then hotdesking works. pam_sunray_hotdesk.so is not
required for hotdesking functionality.
That PAM module supports another feature, called "Remote Hotdesk
Authentication" or RHA, which provides extra security when hotdesking with
smartcards (and also when unlocking non-mobile non-smartcard sessions, which are what you
get on Linux without smartcards today), by performing the authentication outside of the
desktop environment. That feature can be disabled through use of the -D option to
utpolicy or via the admin BUI, and then you don't need that PAM module at all.
The mail message you reference was for somebody who wanted to access their
smartcard session from a non-smartcard environment. They were probably using
the OVDC soft client, in the days before it could use smartcard readers.
Otherwise there's not much point - just use your smartcard.
-Bob
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
