[SSSD-users] Re: smartcard authentication directly against AD (no IPA)?

2018-10-15 Thread Pavel Arnošt
Hi, I'm trying to configure smartcard (pkinit) authentication against Active Directory on latest CentOS without success. AD authentication without smartcard works without problems and standalone kinit with smartcard also works but I can't managed to login with smartcard and sssd. Is it

[SSSD-users] Re: smartcard authentication directly against AD (no IPA)?

2018-08-14 Thread Sumit Bose
On Mon, Aug 13, 2018 at 04:05:55PM -0400, James Ralston wrote: > On Fri, Aug 10, 2018 at 8:31 PM James Cassell > wrote: > > > We had to add each user's Smart Card certificate to the "User > > Certificate" attribute in Active Directory. We were not able to > > make the association only based on

[SSSD-users] Re: smartcard authentication directly against AD (no IPA)?

2018-08-13 Thread James Ralston
On Fri, Aug 10, 2018 at 8:31 PM James Cassell wrote: > We had to add each user's Smart Card certificate to the "User > Certificate" attribute in Active Directory. We were not able to > make the association only based on trusting the X.509 certificate > like Windows does. Bah. I'll get no end