Re: Smart Card - Sun.

On Thu, 7 Nov 2002, Jens Johansson wrote:

> How does the smart card authentication work ?

        If it's the same smart card where I work, there isn't any real authentication aside from the standard username password you usually use. The first time you put the card in you'll probably create a session and it will ask you for your login and passwd. Then if you move to a different location still supported by your server the session will pop up on the new machine.

> What information is stored on the card ?

        A code that is tied to your session.

> How's the security ?

        As logging in normally.

> What do i achive using this authentication method ?

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

        It makes your session portable.  

> I mean, will i still need a password? like pgp encrypt password phrase?

        If you misplace your smartcard, you can still login normally to your machine, kill your processes that exist in your live smartcard session and carry on...

I hope this helps.
Travis

=-=[Travis Ogden]-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

ICQ UIN: #30220771		"Courage is not defined by those who
AIM ID:  Gen2600		 fought and did not fall, but by those
Email:				 who fought, fell, and rose again."