pam_pkcs11

[shawn wilson]

On Mar 20, 2017 08:26, "Eugene Crosser" <crosser at average.org> wrote:

On 03/20/2017 05:06 AM, shawn wilson wrote:

> As I'm looking to implement smartcard local login, it looks like the
> pam module doesn't use scdaemon. gpgsm can create my csr (which is
> awesome), but opensc doesn't work when gpg-agent is running, so I'm
> thinking that neither will pam.

I wonder if it has something to do with this problem?

https://bugs.gnupg.org/gnupg/issue2053

I use Yubikey for local logins (not via its openpgp function), and I
have to run patched scdaemon in order to keep the token reachable by the
processes other than gnupg.

Eugene

That was what I was referring to wrt pkcs11_scd (he made a full scdaemon
replacement - possibly more stable / better)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20170320/2052e9b8/attachment.html>