PIV for Red Hat Linux (from ICAM-COMMUNITY-TECH)

[ryancdickson]

Description of Issue:

A message was posted to the ICAM-COMMUNITY-TECH listserv related to PIV Authentication to Linux systems.

"Has anyone implemented PIV authentication for RedHat Linux using something other than PuTTY-CAC or WinSCP with Pageant? Does not necessarily have to be freeware, just looking for better options. Please email me back if so."

Conversation Highlights:
"I can send you a write up of our solution for smartcard required via PAM and for SSH." (note: I requested a copy of this information)

"We've implemented PIV on Linux on a small scale here, but with local binding only - not with LDAP/AD + Kerberos - and it would be helpful to have access to implementation information from other agencies."

Details of Issue:

[See above]

References (Docs, Links, Files):

N/A

If a New Page or Content is Needed, Expected Outcomes:

New page, focused on PIV Authentication for Linux

Link to the Content Page for Contributors:

[lachellel]

@ryancdickson
Defense Manpower Data Center (DMDC) and Red Hat worked on functionality for smartcard authentication and integrated identity management too. This work was presented at working group meetings, and we should reference the configuration guides and options.

[shawndwells]

Someone brought this thread up to me - figured I'd drop by with some links that may be helpful:

• "How do I configure sssd to authenticate users using a PIV smart card on RHEL7" at https://access.redhat.com/solutions/2620421

• "Chapter 23. Smart-card Authentication in Identity Management" from the RHEL Identity Management docs at https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/linux_domain_identity_authentication_and_policy_guide/index#smart-cards

[pburris67]

Thank you for these links — in fact, both look promising.

On Fri, Dec 6, 2019 at 16:55 Shawn Wells ***@***.***> wrote: Someone brought this thread up to me - figured I'd drop by with some links that may be helpful: - "How do I configure sssd to authenticate users using a PIV smart card on RHEL7" at https://access.redhat.com/solutions/2620421 - "Chapter 23. Smart-card Authentication in Identity Management" from the RHEL Identity Management docs at https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/linux_domain_identity_authentication_and_policy_guide/index#smart-cards — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <https://github.com/GSA/piv-guides/issues/247?email_source=notifications&email_token=AHSNIRJR4N34W5B5QIXX3U3QXLC55A5CNFSM4H4FZSSKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEGFOOYA#issuecomment-562751328>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AHSNIRK6R5TE3Y3754ZCUXLQXLC55ANCNFSM4H4FZSSA> .

-- Peter H. Burris