Hi Bruce, -----Original Message----- From: Bruce Barnett To: [EMAIL PROTECTED] Date: Wed, 6 Oct 2004 11:26:32 -0400 (EDT) Subject: Re: [Muscle] Avoid asking for a username in smart card login
> You are right that there needs to be a clear way to manage these > options. > What happens if there is no smartcard present? > What happens if there is no smartcard reader? > Can root log in during unusual conditions? Another important thing is: what happens if the user removes the card after logging in? If the desktop should be blocked then we need some kind of daemon to provide that. I'm not sure that having so many components cooperating, the system wouldn't suffer from some kind of race condition. I think it would be better that the desktop manager were smartcard-aware. In xscreensaver for instance it would be good that a privileged user could force log off of current user (ms does that and it's useful). Well, we have CTRL+ALT+BKSP ;) > > If you have a PIN, do you need a password as well? > (I tried to get GDM to not require a password, > but I didn't find the right combination). GDM doesn't ask me for a password for PKCS#11 module. It asks a username and then the PKCS#11 asks for the pin (it asks for "Password for token blah blah blah" and not just "password"). But, as I see it, gdm asks for a username before any pam module is called; so I assume that to avoid the user name, patching gdm is needed. I wonder, is this something related to the PAM specification (I mean not having a specific module to ask for the username but having the program to ask for it before any pam module is called). I've been suggested to use gdm autologin feature... Could work as a hack:) Thanks, Josep _______________________________________________ Muscle mailing list [EMAIL PROTECTED] http://lists.drizzle.com/mailman/listinfo/muscle
