utselfreg is the PAM service you want to look at.

 

From: [email protected] 
[mailto:[email protected]] On Behalf Of 
[email protected]
Sent: Thursday, April 21, 2011 3:13 AM
To: [email protected]
Subject: [SunRay-Users] Smartcard selfregistration authentication and LDAP.

 

 

    Hi,

  We tried to setup smartcard selfregistration with authentication to LDAP 
yesterday.

 We are just using the Oracle supplied smartcards so nothing exceptional .

 Smartcard selfregistration with a systemlocal  user works as expected.

 When using a username of an LDAP based user , snoop(1m)    shows that  ldap 
traffic to the directory is initiated, 

and queries and answers get sent,  then   the sunray server logs on to the ldap 
repository with the  user's  credentials

and the  ldap bind succeeds. so the users password has been used and tested.  
However  the smartcard registration fails.

  A truss of utauthd does not really show anything other than that we logon to 
the LDAP repository and then give up. 

 

    which PAM  entries in  /etc/pam.conf  would be used for smartcard 
selfregistration ?

    is there any other  daemon  involved than  utauthd ?

    Does utauthd know what to do with LDAP based smartcard selfregistration ? 

 

    //Lars

 

_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to