Re: [Fed-Talk] [SmartcardServices-Users] SmartCardServices Installers for OS X v10.6-v10.9 Posted!
Re: [Fed-Talk] [SmartcardServices-Users] SmartCardServices Installers for OS X v10.6-v10.9 Posted!
- Subject: Re: [Fed-Talk] [SmartcardServices-Users] SmartCardServices Installers for OS X v10.6-v10.9 Posted!
- From: Jim Thomas <email@hidden>
- Date: Tue, 14 Jan 2014 11:26:55 -0600
Walter,
To clarify, you are manually mapping the PIV cert on your card to a
Mobile Account, is that correct?
Regards,
Jim Thomas
On 1/14/14 7:42 AM, Rowe, Walter wrote:
Shawn Geddis posted this on the SmartcardServices Users list last
night. The packages have been updated for 10.6 to 10.9, and a new
command line now lets you enable or disable easily without
manually editing /etc/authorization.
$ security
authorizationdb smartcard status
Current
smartcard login state: enabled (system.login.console
enabled, authentication rule enabled)
YES (0)
$ security
authorizationdb smartcard enable
YES (0)
$ security authorizationdb
smartcard disable
YES (0)
If you execute the enable or disable as an admin user,
the commands above will pop-up an authentication panel
asking for admin credentials. I’ve tested these on Mavericks
with PIV login. Works great. My Mac is joined to an AD
domain and I log in with an AD user ID. This new version was
able to map my PIV card to my AD ID automatically after
enabling smartcard authentication via the above command
line.
Kudos to Shawn!
Walter
--
Walter Rowe,
Hosting Services
Enterprise
Systems / OISM
Email: email@hidden
Work:
301-975-2885
Begin forwarded message:
Subject:
[SmartcardServices-Users]
SmartCardServices Installers for OS X v10.6-v10.9
Posted!
Date: January 13, 2014 at
10:06:20 PM EST
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden