[ale] CAC Smart cards or similiar for Linux

[goozbach at friocorte.com (Derek Carter)]

On 11/22/10 3:20 PM, Mike Harrison wrote:
>
> I trying to figure out how to use CAC (Common Access Control) or similiar
> smart cards for an access control to a web system. There are some
> MS-Specific solutions, but I'm looking for something that works well with
> a Linux server and MS or Linux clients running FireFox.
>
> Specifically, I'd love to find a "Package" of a few hundred "cards"
> or "USB Tokens", a card/token creator/writer and the server side
> components that all work together.
>
> I'm trying to add a physical '3rd factor' to accessing a special web
> application. We are already using client certs... but some people want
> even more.  A USB Key or CAC card would be perfect.
>
> Any clues, or are we in the famous: "built it from scratch yourself"
> territory?

The fedora project is working towards using these:

http://www.yubico.com/yubikey

To integrate with all the fedora admin stuff.

Should be a good place to start.

--
Derek