On 30/10/2011, at 9:19 AM, Nico Williams wrote:
> Also, we want to be able to prompt at credential acquisition time too
> (for smartcard PINs, say), but this is much less important for GSS-EAP
> than, say, GSS-Kerberos w/ PKINIT.
Yeah, this whole thing needs some design work to be done properly (and then that needs to be plumbed into the GS2 and pam_gss plugins appropriately). Something unfortunately I don't have time for right now, if anything my priority is more on getting a great UX on Windows.
-- Luke
|