Re: [opensc-devel] Pinpad again

2006-11-17 Thread Peter Stuge
On Fri, Nov 17, 2006 at 02:47:31PM +0100, Ludovic Rousseau wrote: > I don't know if pam_pkcs11 can know: > - that a PIN pad is connected > - that the PKCS#11 lib will/can use the PIN pad so the PAM module do > not have to ask for a PIN on the keyboard. Supposedly, it can. CKF_PROTECTED_AUTHENTICA

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Ludovic Rousseau
On 17/11/06, Jonsito <[EMAIL PROTECTED]> wrote: El vie, 17-11-2006 a las 14:47 +0100, Ludovic Rousseau escribió: - that the PKCS#11 lib will/can use the PIN pad so the PAM module do not have to ask for a PIN on the keyboard. I ask pin/password by mean of pam libraries. so no control on where pam

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Jonsito
El vie, 17-11-2006 a las 14:47 +0100, Ludovic Rousseau escribió: I don't know if pam_pkcs11 can know: - that a PIN pad is connected Sure no, unless pkcs11 interface could inform us that pinpad is attached. Anyway this issue is not handled by my code - that the PKCS#11 lib will/can use the PIN pa

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Ludovic Rousseau
On 17/11/06, Johannes Becker <[EMAIL PROTECTED]> wrote: > As Martin said we should correct this. So if you can show us a PAM > module that does not prompt for PIN that would help. Well, nearly every other pam module has to get the password via the keyboard and prompts for it. The only exception

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Johannes Becker
Hello, Am Donnerstag, 16. November 2006 14:59 schrieb Ludovic Rousseau: > > What do you use for the authentication in this precise case? Do you > use a PAM module? Which one? /usr/local/lib/security/pam_pkcs11.so I compiled pam_pkcs11-0.5.3 > As Martin said we should correct this. So if you ca

Re: [opensc-devel] Pinpad again

2006-11-16 Thread Ludovic Rousseau
Hello, On 16/11/06, Johannes Becker <[EMAIL PROTECTED]> wrote: Eddy Nigg (StartCom Ltd.) wrote: > It requires modification of g/kdm, something we intend to > suggest/propose/modify in the future. > I guess, you wouldn't have to modify gdm/kdm. My Pinpad beeps and blinks, as soon as the system as

Re: [opensc-devel] Pinpad again

2006-11-16 Thread Martin Paljak
On 16.11.2006, at 11:01, Johannes Becker wrote: 1. Authentication with pam_pkcs11.so Probly needs support in PAM level and modifications in pam_pkcs11. 2. Using Mozilla Firefox Some time ago there was a blog post asking people to pick up PSM (the stuff that manages such GUI issues in mozi

[opensc-devel] Pinpad again

2006-11-16 Thread Johannes Becker
Eddy Nigg (StartCom Ltd.) wrote: It requires modification of g/kdm, something we intend to suggest/propose/modify in the future. I guess, you wouldn't have to modify gdm/kdm. My Pinpad beeps and blinks, as soon as the system asks for the PIN. So it would be nice to have no prompt for a keyb