r0 nam1 via FreeIPA-users wrote:
I'm wondering if anybody who actually knows this can shed some
light on how it works.
I'm attempting to get Certificate Based SmartCards (Yubikeys) to work with FreeIPA so
I can connect terminals and have MFA domain wide.
The issue is that on Debian PC's, the process isn't documented very well, or even
how all the components interact.
Could anybody shed some light on how each program interacts, from OpenSC to SSSD talking
to FreeIPA to validate the Cert, how does it all work?
What have you already done?
This is documented at
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/...
rob