I would like to be able to SSH to my machine using a Gemalto .NET Smart Card as the authentication method. How could this be done on a Fedora 13 (or generic Red Hat style) machine?These are the rough steps I think are needed:Provision certificate for the smart card (and possibly a CA to issue it?)Get the certificate onto the smart cardConfigure SSH server to allow smart card authentication and configure it to use a particular certificate/CAAn SSH client that has smart card support (extra points for a free Windows based one)
How can I set up smart card SSH authentication?
ssh
Gemalto drivers are now open source I believe.  They have the source code on their website.You will need to configure the pam module (I'm not sure how to do this, but the code is certainly there).  I imagine the pam configuration would require a mapping of a certificate principle to a local user id.GDM I believe supports smart cards now, but I'm not sure how it detects it.  I'll try to look this up later (easiest way is probably to just peek at the gdm source code).Of course this all requires pcscd and libpcsclite to be installed.  You will also need to copy the libgtop11dotnet.so to /usr/lib.