{{{ oval_metadata("Enable Smart Card logins") }}}
/etc/pam_pkcs11/pam_pkcs11.conf
^[\s]*cert_policy[ ]=(.*)$
1
^.*ocsp_on.*$
\nauth[\s]+required[\s]+pam_env.so
(\nauth[\s]+required[\s]+pam_faildelay.so[\s]+delay=2000000)?
\nauth[\s]+\[success=1[\s]default=ignore\][\s]pam_succeed_if.so[\s]service[\s]notin[\s]
login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensaver[\s]quiet[\s]use_uid
\nauth[\s]+\[success=done[\s]authinfo_unavail=ignore[\s]ignore=ignore[\s]default=die\][\s]
pam_pkcs11.so[\s]nodebug\n
/etc/pam.d/system-auth
1
\nauth[\s]+required[\s]+pam_env.so
(\nauth[\s]+required[\s]+pam_faildelay.so[\s]+delay=2000000)?
\nauth[\s]+\[success=1[\s]default=ignore\][\s]pam_succeed_if.so[\s]service[\s]notin[\s]
login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensaver[\s]quiet[\s]use_uid
\nauth[\s]+\[success=done[\s]ignore=ignore[\s]default=die\][\s]
pam_pkcs11.so[\s]nodebug[\s]wait_for_card\n
/etc/pam.d/system-auth
1
\nauth[\s]+required[\s]+pam_env.so.*
\nauth[\s]+\[success=done[\s]ignore=ignore[\s]default=die\][\s]
pam_pkcs11.so[\s]nodebug[\s]wait_for_card\n.*
\npassword[\s]+required[\s]+pam_pkcs11.so\n
/etc/pam.d/smartcard-auth
1