[FC8] ssh and CAC card???

Todd Denniston Todd.Denniston at ssa.crane.navy.mil
Tue Dec 4 21:52:16 UTC 2007


  From what I understood, the change to openssh listed in:
  rpm -q --changelog  openssh  |less
as:
"* Wed Jun 20 2007 Tomas Mraz <tmraz at redhat.com> - 4.5p1-7
- experimental NSS keys support
- correctly setup context when empty level requested (#234951)
"
was supposed to allow the Common Access Card (CAC) to work with the shipped 
Fedora 8 ssh.

As per NSS usual, everything is undocumented, i.e., `ssh-add --help` does not 
help at all, and `man ssh-add` points to `ssh-add -s reader`
# ssh-add -s 0
Enter passphrase for smartcard:
SSH_AGENT_FAILURE
Could not add card: 0
# ssh-add -s 1
Enter passphrase for smartcard:
SSH_AGENT_FAILURE
Could not add card: 1

So does anyone know how to use the possible functionality, or are we reduced 
to reading the source?

-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter




More information about the fedora-list mailing list