On Fri, Oct 20, 2017 at 04:25:52PM +0200, Winberg, Adam wrote:
> Using pam_pkcs11 we can use the parameter 'wait_for_card' to halt the pam
> process until a smart card is inserted. Is there any feature like that with
> pam_sss?
> 
> Use case is to require smart card for logins. With GDM this is configured
> via dconf, but with console/tty logins there is no such configuration
> available as I know of. So with pam_sss you can freely logon to a TTY
> without using smartcard. Or maybe there is a solution out there I'm missing?

This is work-in-progress, I'll try to implement missing features from
pam_pkcs11 step by step.

bye,
Sumit

> 
> Regards
> Adam

> _______________________________________________
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org

Reply via email to