Hello,

I've successfully tried smart card login using Mario Strasser's PKCS#11 pam module. It works ok.

On GDM it asks for a username, and then it asks pam, which makes gdm ask the password for the token.

On XDM it asks for a username and a password (the latter is taken as the pin to the card).

But now i'd prefer something more specific to smart card environment. It would be wonderful if the screen showed a message like "insert your card" and reacted to it.

I don't know much about pam, but it seems to me that a module could be made only for that or even modify strasser's module to do this. The only thing I'm not sure of is that gdm and xdm seem to ask for a username before even looking to pam configuration, so perhaps they need to be patched. Does anyone that knows this better agree?

It would also be good that module just took username from the certificate in the card, instead of asking for it and then matching a certificate. From a quick look at the code I see that this can't be done as it is now.

Does anybody already done this? Any ideas?

TIA,

--
Josep Mon�s
[EMAIL PROTECTED]
C3PO, S.L.

_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to