SmartSession HOWTO

Résumé

This document describes how to use the SmartSession suite. This set of tools provides functions and modules able to secure a Linux session using smartcards (login, autolock, ciphered file system).

Table des matières

• 1 WHAT IS SMARTSESSION?
• 2 WHAT CARDS ARE USED?
• 3 SMARTSESSION FOR THE IMPATIENT
  • 3.1 About the pam_smartcard module
  • 3.2 About CFS for smartcard
• 4 HOW TO MANAGE THE SMARTCARDS
  • 4.1 Choose a passphrase
  • 4.2 Format a smartcard
  • 4.3 Change the user PIN
  • 4.4 Unlock a smartcard
  • 4.5 Life cycle of the smartcard
• 5 HOW TO MANAGE THE PUBLIC KEY CERTIFICATION
  • 5.1 What is the public key certification
  • 5.2 Create the administrator certification smartcard
  • 5.3 Install the certification public key
  • 5.4 Other feature of the certification
• 6 HOW TO MANAGE THE USER PUBLIC KEYS
  • 6.1 Using a local database
  • 6.2 Using NIS
  • 6.3 Add a new user
  • 6.4 Delete a registered user
  • 6.5 List the registered user
  • 6.6 Verify the database integrity
• 7 HOW TO USE THE PAM_SMARTCARD MODULE
• 8 HOW TO INTEGRATE THE PAM_SMARTCARD MODULE IN VARIOUS APPLICATIONS
  • 8.1 In the console login application
  • 8.2 In login with display manager applications
  • 8.3 In other authentication applications
• 9 HOW TO USE THE CFS FOR SMARTCARD APPLICATION
• 10 HOW RESTORE A CFS CIPHERED DIRECTORY
• 11 FOCUS ON THE AUTOLOCK DAEMON
  • 11.1 What is the autolock demon
  • 11.2 Some particularities
  • 11.3 When the card is in the reader
  • 11.4 When the card is removed from the reader
• 12 FOCUS ON THE SMATCARD FILE STRUCTURE
  • 12.1 User card
  • 12.2 Admin card