<div dir="ltr">Hmm....for a public guide, shouldn&#39;t the solution be public as well?</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Aug 7, 2014 at 12:44 AM, Shawn Wells <span dir="ltr">&lt;<a href="mailto:shawn@redhat.com" target="_blank">shawn@redhat.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Updated XCCDF to reflect location of vendor docs on integrating SSH+CAC cards<br>
<br>
Signed-off-by: Shawn Wells &lt;<a href="mailto:shawn@redhat.com">shawn@redhat.com</a>&gt;<br>
---<br>
 RHEL/6/input/system/accounts/physical.xml |    4 ++++<br>
 1 files changed, 4 insertions(+), 0 deletions(-)<br>
<br>
diff --git a/RHEL/6/input/system/accounts/physical.xml b/RHEL/6/input/system/accounts/physical.xml<br>
index c9d1958..db5fb66 100644<br>
--- a/RHEL/6/input/system/accounts/physical.xml<br>
+++ b/RHEL/6/input/system/accounts/physical.xml<br>
@@ -403,6 +403,10 @@ To enable smart card authentication, consult the documentation at:<br>
 &lt;ul&gt;<br>
 &lt;li&gt;<a href="https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html" target="_blank">https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Managing_Smart_Cards/enabling-smart-card-login.html</a>&lt;/li&gt;<br>

 &lt;/ul&gt;<br>
+For guidance on enabling SSH to authenticate against CAC cards, consult documentation at:<br>
+&lt;ul&gt;<br>
+&lt;li&gt;<a href="https://access.redhat.com/solutions/82273" target="_blank">https://access.redhat.com/solutions/82273</a>&lt;/li&gt;<br>
+&lt;/ul&gt;<br>
 &lt;/description&gt;<br>
 &lt;ocil clause=&quot;non-exempt accounts are not using CAC authentication&quot;&gt;<br>
 Interview the SA to determine if all accounts not exempted by policy are<br>
<span class="HOEnZb"><font color="#888888">--<br>
1.7.1<br>
<br>
--<br>
SCAP Security Guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
<a href="https://github.com/OpenSCAP/scap-security-guide/" target="_blank">https://github.com/OpenSCAP/scap-security-guide/</a></font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br>Trevor Vaughan<br>
Vice President, Onyx Point, Inc<br>(410) 541-6699<br><a href="mailto:tvaughan@onyxpoint.com">tvaughan@onyxpoint.com</a><br><br>-- This account not approved for unencrypted proprietary information --
</div>