* sshd and smart card support
@ 2015-09-27 8:45 Jarek C.
2015-09-27 18:18 ` [cygwin] " Jason Pyeron
0 siblings, 1 reply; 2+ messages in thread
From: Jarek C. @ 2015-09-27 8:45 UTC (permalink / raw)
To: cygwin
After a lot of struggling with trying to get sshd work with regular
domain accounts I found an alternative bit of software I then installed
for a test. After a failed test, looking thrugh the logs of that ssh
server I found an interesting piece of information possibly explaining
why it wouldn't work with my initial setup. It turned up that all the
domain accounts I used for testing have a requirement associated with
the account AD object to use smart cards for logon pourposes. I never
seen this mentioned in cygwin sshd logs as a reason for failed
connection but only a statement that the logon name or password was
incorrect. I don't suppose there is a workaround but maybe something
worth implementing in sshd logs to cover this sort of scenerios as
likely no one was expecting this to be causing access problems.
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
^ permalink raw reply [flat|nested] 2+ messages in thread
* RE: [cygwin] sshd and smart card support
2015-09-27 8:45 sshd and smart card support Jarek C.
@ 2015-09-27 18:18 ` Jason Pyeron
0 siblings, 0 replies; 2+ messages in thread
From: Jason Pyeron @ 2015-09-27 18:18 UTC (permalink / raw)
To: cygwin
> -----Original Message-----
> From: Jarek C.
> Sent: Sunday, September 27, 2015 4:45 AM
>
> After a lot of struggling with trying to get sshd work with
> regular domain accounts I found an alternative bit of
> software I then installed for a test. After a failed test,
> looking thrugh the logs of that ssh server I found an
> interesting piece of information possibly explaining why it
> wouldn't work with my initial setup. It turned up that all
> the domain accounts I used for testing have a requirement
> associated with the account AD object to use smart cards for
> logon pourposes. I never seen this mentioned in cygwin sshd
> logs as a reason for failed connection but only a statement
> that the logon name or password was incorrect. I don't
> suppose there is a workaround but maybe something worth
> implementing in sshd logs to cover this sort of scenerios as
> likely no one was expecting this to be causing access problems.
1. Getting ssh to work with smartcards would be the first step.
This requires working with the smartcard middleware / applets. There are
many people out there who would be interested in this.
2. Getting sshd to interact as if a smart card was presented...
This is a lot less likely to succeed.
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- -
- Jason Pyeron PD Inc. http://www.pdinc.us -
- Principal Consultant 10 West 24th Street #100 -
- +1 (443) 269-1555 x333 Baltimore, Maryland 21218 -
- -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-09-27 18:18 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2015-09-27 8:45 sshd and smart card support Jarek C.
2015-09-27 18:18 ` [cygwin] " Jason Pyeron
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).