8.10. Logging in to GDM using smart card authentication on an IdM client

Prerequisites

• The system has been configured for smart card authentication. For details, see Configuring the IdM client for smart card authentication.
• The smart card contains your certificate and private key.
• The user account is a member of the IdM domain.

• The certificate on the smart card maps to the user entry through:

  • Assigning the certificate to a particular user entry. For details, see, Adding a certificate to a user entry in the IdM Web UI or Adding a certificate to a user entry in the IdM CLI.
  • The certificate mapping data being applied to the account. For details, see Certificate mapping rules for configuring authentication on smart cards.

Verification

• In the Terminal window, enter klist and check the result:

  $ klist
  Ticket cache: KEYRING:persistent:1358900015:krb_cache_TObtNMd
  Default principal: example.user@REDHAT.COM
  
  Valid starting       Expires              Service principal
  04/20/2020 13:58:24  04/20/2020 23:58:24  krbtgt/EXAMPLE.COM@EXAMPLE.COM
  	renew until 04/27/2020 08:58:15