Smartard logon with XP

[Philippe C. Martin]

Hi,

I just found your email on a 1 year old thread at mailman.mit.edu.

I wanted to know whether you had figured out an XP/non domain solution.

So far the only way I found to get a "card insertion event" is to launch a 
timer: the point for me being to offer smart card PC protection for 
non-networked PCs.

Regards,

Philippe martin





>Robert,

>As you have discovered, if you want to use the Windows GINA/WinLogon/SSP 
>provided by Microsoft and logon via a UNIX KDC with a smart card you first 
>need to make the workstation a member of a domain. The only solution I can 
>think of is to develop a new gina which supports pkinit and bypasses the 
>Microsoft code that does the same job - this will then work when workstation 
i>s not a member of a domain. We have done this on Windows NT, but our 
>Win2k/XP product does not yet replace the gina. We are planning to address 
>this requirement in the future, so I would be interested to find out how 
>successful you are ?

>Thanks,Tim.


-- 
*************************************
Philippe C. Martin
SnakeCard, LLC
www.snakecard.com
+1 405 694 8098
*************************************