On Fri, Oct 20, 2017 at 04:25:52PM +0200, Winberg, Adam wrote: > Using pam_pkcs11 we can use the parameter 'wait_for_card' to halt the pam > process until a smart card is inserted. Is there any feature like that with > pam_sss? > > Use case is to require smart card for logins. With GDM this is configured > via dconf, but with console/tty logins there is no such configuration > available as I know of. So with pam_sss you can freely logon to a TTY > without using smartcard. Or maybe there is a solution out there I'm missing?
This is work-in-progress, I'll try to implement missing features from pam_pkcs11 step by step. bye, Sumit > > Regards > Adam > _______________________________________________ > sssd-users mailing list -- sssd-users@lists.fedorahosted.org > To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org