<div dir="ltr">ack</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 7, 2014 at 4:50 PM, Shawn Wells <span dir="ltr">&lt;<a href="mailto:shawn@redhat.com" target="_blank">shawn@redhat.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">- Added link to vendor docs<br>
- bolded links<br>
- &quot;CAC cards&quot; was redundant<br>
<br>
Signed-off-by: Shawn Wells &lt;<a href="mailto:shawn@redhat.com">shawn@redhat.com</a>&gt;<br>
---<br>
 RHEL/6/input/system/accounts/physical.xml |    6 +++++-<br>
 1 files changed, 5 insertions(+), 1 deletions(-)<br>
<br>
diff --git a/RHEL/6/input/system/accounts/physical.xml b/RHEL/6/input/system/accounts/physical.xml<br>
index c9d1958..71a7bef 100644<br>
--- a/RHEL/6/input/system/accounts/physical.xml<br>
+++ b/RHEL/6/input/system/accounts/physical.xml<br>
@@ -401,7 +401,11 @@ is not enabled by default and must be enabled in the system settings.<br>
 &lt;description&gt;<br>
 To enable smart card authentication, consult the documentation at:<br>
 &lt;ul&gt;<br>
-&lt;li&gt;<a href="https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html" target="_blank">https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html</a>&lt;/li&gt;<br>

+&lt;li&gt;&lt;b&gt;<a href="https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html" target="_blank">https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html</a>&lt;/b&gt;&lt;/li&gt;<br>

+&lt;/ul&gt;<br>
+For guidance on enabling SSH to authenticate against a Common Access Card (CAC), consult documentation at:<br>
+&lt;ul&gt;<br>
+&lt;li&gt;&lt;b&gt;<a href="https://access.redhat.com/solutions/82273" target="_blank">https://access.redhat.com/solutions/82273</a>&lt;/b&gt;&lt;/li&gt;<br>
 &lt;/ul&gt;<br>
 &lt;/description&gt;<br>
 &lt;ocil clause=&quot;non-exempt accounts are not using CAC authentication&quot;&gt;<br>
<span class="HOEnZb"><font color="#888888">--<br>
1.7.1<br>
<br>
--<br>
SCAP Security Guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
<a href="https://github.com/OpenSCAP/scap-security-guide/" target="_blank">https://github.com/OpenSCAP/scap-security-guide/</a></font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div>
<div>David Smith<br></div><font size="1">Sr. Information Security Engineer<br></font></div><font size="1">Secure Innovations, LLC</font><br></div>
</div>