On Fri, Oct 20, 2017 at 04:25:52PM +0200, Winberg, Adam wrote:
Using pam_pkcs11 we can use the parameter 'wait_for_card' to
halt the pam
process until a smart card is inserted. Is there any feature like that with
pam_sss?
Use case is to require smart card for logins. With GDM this is configured
via dconf, but with console/tty logins there is no such configuration
available as I know of. So with pam_sss you can freely logon to a TTY
without using smartcard. Or maybe there is a solution out there I'm missing?
This is work-in-progress, I'll try to implement missing features from
pam_pkcs11 step by step.
bye,
Sumit
Regards
Adam
_______________________________________________
sssd-users mailing list -- sssd-users(a)lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave(a)lists.fedorahosted.org