* Todd Denniston (Todd.Denniston(a)ssa.crane.navy.mil) wrote:
From what I understood, the change to openssh listed in:
rpm -q --changelog openssh |less
as:
"* Wed Jun 20 2007 Tomas Mraz <tmraz(a)redhat.com> - 4.5p1-7
- experimental NSS keys support
- correctly setup context when empty level requested (#234951)
"
was supposed to allow the Common Access Card (CAC) to work with the shipped
Fedora 8 ssh.
As per NSS usual, everything is undocumented, i.e., `ssh-add --help` does
not help at all, and `man ssh-add` points to `ssh-add -s reader`
# ssh-add -s 0
Enter passphrase for smartcard:
SSH_AGENT_FAILURE
Could not add card: 0
# ssh-add -s 1
Enter passphrase for smartcard:
SSH_AGENT_FAILURE
Could not add card: 1
So does anyone know how to use the possible functionality, or are we
reduced to reading the source?
--
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter
--
fedora-list mailing list
fedora-list(a)redhat.com
To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-list
There is a link:
http://www.nabble.com/ssh-and-CAC-t2483281.html
with some information.
You have the SmartCard setup working under Linux?
What reader are you using? I've tried the ActiveCard v2.0 USB to no
avail. Actually, this is known not to work, but I had to try anyway :)
I should have an Athena USB reader coming my way soon. Hopefully that
will allow use with FireFox.
Jeff Krebs