[SmartcardServices-Users] of keychains and CAC

Yoann Gini yoann.gini at gmail.com
Mon Dec 9 09:55:19 PST 2013


Le 9 déc. 2013 à 18:33, Daly, John CIV NAVAIR, 4L6200D <john.l.daly at navy.mil> a écrit :

> my quest to enable CAC for all my users continues.  Until I can get PKI-INIT to work with Open Directory, I'm simply adding the user's pubkeyhash to their account, following Yoann Gini's directions.
> I've noticed that the CAC doesn't unlock the user's login keychain when logging in.  

When using pubkeyhash, I’ve just set my login keychain to use my PIN code as password, without any command line, just using the password modification tool in Keychain Access.


PS:
I’m also working on PKINIT with AD at this time, impossible to make it work without Centrify / Thursby.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4806 bytes
Desc: not available
URL: <https://lists.macosforge.org/pipermail/smartcardservices-users/attachments/20131209/f39353fe/attachment.p7s>


More information about the SmartcardServices-Users mailing list