{{{ oval_metadata("SSSD should be configured to authenticate access to the system using smart cards.") }}} {{% if product in ["fedora", "ol8", "ol9", "rhel8", "rhel9"] %}} {{% endif %}}
/etc/sssd/sssd.conf
^[\s]*\[pam](?:[^\n\[]*\n+)+?[\s]*pam_cert_auth[\s]*=[\s]*(?i)true\s*$
1

{{% if product in ["fedora", "ol8", "ol9", "rhel8", "rhel9"] %}}

/etc/pam.d/smartcard-auth
^\s*auth.*?pam_sss\.so(.*)
1
/etc/pam.d/system-auth
^\s*auth.*?pam_sss\.so(.*)
1
^.*(try_cert_auth|require_cert_auth).*$
^.*allow_missing_name.*$
{{% endif %}}