[Pcsclite-muscle] Best way to remotely use smart card?

[Jakub Jelen]

Hi,
I was writing couple of paragraphs about the polkit authorization in
pcsc, how does it work, how it can be configured for special cases
like this as the whole polkit thing is quite under-documented in all
places I found:

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/assembly_controlling-access-to-smart-cards-using-polkit_security-hardening

This is about RHEL8, but most of the stuff should apply to Fedora too.

Let me know if it will help of if you could use some more information
in the documentation.

Jakub

On Mon, Nov 13, 2023 at 10:21 AM Ludovic Rousseau
<ludovic.rousseau at gmail.com> wrote:
>
> Le lun. 13 nov. 2023 à 06:05, D Ducky <suffsuccotash at gmail.com> a écrit :
> >
> > Is that what it is?
> >
> > If I go to the remote machine physically, and log in, I can use the
> > smart card.
> >
> > If I am on my client machine and use remmina with ssh+vnc, it does not
> > see a smart card on the web browsers.
> >
> > That's the issue.
>
> I agree with David, it looks like a (polkit) authorization issue.
> If you run the pcsc_scan command on the server while connected using
> remmina, vnc+ssh what error do you get?
> https://blog.apdu.fr/posts/2014/03/level-1-smart-card-support-on-gnulinux/
>
> See also https://github.com/LudovicRousseau/PCSC/blob/master/doc/README.polkit
>
> Bye
>
> --
>  Dr. Ludovic Rousseau
>
> _______________________________________________
> pcsclite-muscle mailing list
> pcsclite-muscle at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/pcsclite-muscle