[Samba] Smart card logon

[Andrew Bartlett]

On Mon, 2008-02-18 at 08:16 +0100, Asier Baranguán wrote:
> Andrew Bartlett escribió:
> 
> >>> with Heimdal clients and OpenSC smart cards to AD.
> >> So there's no option to make it "the easy way". Well, we'll wait for Samba4.
> > 
> > I would love to work with someone to try and get smart card logins to
> > work with Samba4. 
> 
> I'm not a coder (almost in C), but have the time and need for trying smartcard logon with 
> Samba. I have all the tools ans software needed: smartcards+usb readers, usb tokens, PKI 
> infraestructure... ¿how can I help?

How are you with setting up windows systems for smart card logins?

Do you have much experience with virtualisation tools such as qemu/kvm?

I've not really looked at this area, but the first question I have is:
how does a windows client know to accept a smart card login, and what
certificate it should trust. 

Accepting the PKINIT request already works (we test this in 'make
test'), but surely there will be many more things to fix. 

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20080220/c42264a7/attachment.bin