RE: [Fed-Talk] Government / Military Mac users get PIV single sign-on from Thursby (UNCLASSIFIED)
RE: [Fed-Talk] Government / Military Mac users get PIV single sign-on from Thursby (UNCLASSIFIED)
- Subject: RE: [Fed-Talk] Government / Military Mac users get PIV single sign-on from Thursby (UNCLASSIFIED)
- From: "Gillett, Thomas J. (CMS/CTR)" <email@hidden>
- Date: Thu, 4 Jun 2009 13:59:12 -0400
- Thread-topic: [Fed-Talk] Government / Military Mac users get PIV single sign-on from Thursby (UNCLASSIFIED)
Yes , We had to set up a certificate server in our domain and issue certificates to our domain controllers -- I am omitting that part of the story. Yes , we dont want to use local accounts. So we would have to use AdmitMAC or centrify to take the place of the "middleware" in osx which, for the windows PC's is Activclient.
-----Original Message-----
From: Miller, Timothy J. [mailto:email@hidden]
Sent: Thursday, June 04, 2009 9:28 AM
To: Gillett, Thomas J. (CMS/CTR); email@hidden; Mike Enos; email@hidden
Subject: Re: [Fed-Talk] Government / Military Mac users get PIV single sign-on from Thursby (UNCLASSIFIED)
On 6/2/09 4:43 PM, "Gillett, Thomas J. (CMS/CTR)"
<email@hidden> wrote:
> Yes .. I follow you on that. It¹s not native in windows either, We have a
> product called active client installed for that to work. When we set up the
> PIV card in windows , we installed active client and then the os recognized it
> at the login screen and we would be prompted to enter our pin.
...which still wouldn't log you in without significant work in the AD
domain.
> With active
> client for OS X installed It still did not prompt us for our pin when a card
> was inserted. This was an issue with active client, not OSX .
You don't need ActivClient on OS X (RSA2048 issues with Apple's PIV tokend
aside). You *do* need to enable local accounts if that's what you want
using sc_auth, *or* you need something like ADmitMac or Centrify if you're
trying to log into an AD account.
-- Tim
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden