<div dir="ltr">Hmm....for a public guide, shouldn't the solution be public as well?</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 7, 2014 at 12:44 AM, Shawn Wells <span dir="ltr"><<a href="mailto:shawn@redhat.com" target="_blank">shawn@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Updated XCCDF to reflect location of vendor docs on integrating SSH+CAC cards<br>
<br>
Signed-off-by: Shawn Wells <<a href="mailto:shawn@redhat.com">shawn@redhat.com</a>><br>
---<br>
RHEL/6/input/system/accounts/physical.xml | 4 ++++<br>
1 files changed, 4 insertions(+), 0 deletions(-)<br>
<br>
diff --git a/RHEL/6/input/system/accounts/physical.xml b/RHEL/6/input/system/accounts/physical.xml<br>
index c9d1958..db5fb66 100644<br>
--- a/RHEL/6/input/system/accounts/physical.xml<br>
+++ b/RHEL/6/input/system/accounts/physical.xml<br>
@@ -403,6 +403,10 @@ To enable smart card authentication, consult the documentation at:<br>
<ul><br>
<li><a href="https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html" target="_blank">https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html</a></li><br>
</ul><br>
+For guidance on enabling SSH to authenticate against CAC cards, consult documentation at:<br>
+<ul><br>
+<li><a href="https://access.redhat.com/solutions/82273" target="_blank">https://access.redhat.com/solutions/82273</a></li><br>
+</ul><br>
</description><br>
<ocil clause="non-exempt accounts are not using CAC authentication"><br>
Interview the SA to determine if all accounts not exempted by policy are<br>
<span class="HOEnZb"><font color="#888888">--<br>
1.7.1<br>
<br>
--<br>
SCAP Security Guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
<a href="https://github.com/OpenSCAP/scap-security-guide/" target="_blank">https://github.com/OpenSCAP/scap-security-guide/</a></font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br>Trevor Vaughan<br>
Vice President, Onyx Point, Inc<br>(410) 541-6699<br><a href="mailto:tvaughan@onyxpoint.com">tvaughan@onyxpoint.com</a><br><br>-- This account not approved for unencrypted proprietary information --
</div>