> But now i'd prefer something more specific to smart card environment. It
> would be wonderful if the screen showed a message like "insert your
> card" and reacted to it.
Currently the MusclePAM code, which I have been modifying,
asks for the PIN value (GDM, login, and su asks, but not xscreensaver).
If the card is not present, it immediately exists ( in login, and su).
You are right that there needs to be a clear way to manage these options.
What happens if there is no smartcard present?
What happens if there is no smartcard reader?
Can root log in during unusual conditions?
If you have a PIN, do you need a password as well?
(I tried to get GDM to not require a password,
but I didn't find the right combination).
> It would also be good that module just took username from the
> certificate in the card, instead of asking for it and then matching a
> certificate. From a quick look at the code I see that this can't be done
> as it is now.
This is another area that needs work. Right now the musclecard
has no concept of the user's account name. And the reader can only identify the card
type, and not the owner.
_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.drizzle.com/mailman/listinfo/muscle
