[23785] in Kerberos
Smartard logon with XP
daemon@ATHENA.MIT.EDU (Philippe C. Martin)
Wed Apr 27 15:34:10 2005
From: "Philippe C. Martin" <philippecmartin@sbcglobal.net>
To: kerberos@mit.edu
Date: Wed, 27 Apr 2005 17:43:00 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200504271743.00702.philippecmartin@sbcglobal.net>
Errors-To: kerberos-bounces@mit.edu
Hi,
I just found your email on a 1 year old thread at mailman.mit.edu.
I wanted to know whether you had figured out an XP/non domain solution.
So far the only way I found to get a "card insertion event" is to launch a
timer: the point for me being to offer smart card PC protection for
non-networked PCs.
Regards,
Philippe martin
>Robert,
>As you have discovered, if you want to use the Windows GINA/WinLogon/SSP
>provided by Microsoft and logon via a UNIX KDC with a smart card you first
>need to make the workstation a member of a domain. The only solution I can
>think of is to develop a new gina which supports pkinit and bypasses the
>Microsoft code that does the same job - this will then work when workstation
i>s not a member of a domain. We have done this on Windows NT, but our
>Win2k/XP product does not yet replace the gina. We are planning to address
>this requirement in the future, so I would be interested to find out how
>successful you are ?
>Thanks,Tim.
--
*************************************
Philippe C. Martin
SnakeCard, LLC
www.snakecard.com
+1 405 694 8098
*************************************
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
