Tema: Re: Keistos problemos su sertifikatais
Autorius: krakadils
Data: 2009-08-18 12:39:34
naudojam Alladin produkcija, jei konkreciau eToken PRO 64K usb raktai
reikalaujantis papildomo softo / driaveriu bet tai ispresta kaip ir visur 
manau - per GP.
beje daigtas patogus laikyti netik domeno certf. bet ir pvz TrueCrypt 
autentifikacijos dali.


tik minusai:
* tam tikrose situacijose kuriuose neveikia IIS windows int. auth. belieka 
juzeriui palikti passworda arba weba kabinti ant https.
* vartotojui norint prieiti is nedomininio kompo prie exchange OWA tenka 
suinstalinti driaverius (Vistoje jau to nebereikia)




"krx" <krx@d.lt> wrote in message news:h6dsgl$kcf$1@trimpas.omnitel.net...
> Pas jumi kokios kortos/autentifikatorius? custom-GINA? su papildomu PIN 
> įvedimu? Ar kokis USB su biometrija?
>
> "krakadils" <no@amail.lt> wrote in message 
> news:h6drrj$je5$1@trimpas.omnitel.net...
>>+ sugeneruoju passworda
>> pvz kaip: g5DwbTBCT6mM3^AZ1Cwosv7XZ%SSQ5
>>
>>
>> "krakadils" <no@amail.lt> wrote in message 
>> news:h6drqk$jc1$1@trimpas.omnitel.net...
>>> nugi raso kad pass expairinosi :)
>>> ziurek GP arba ant juzerio...
>>>
>>> as dedu
>>> * password never expires
>>> * user cannot change password
>>> * smart card required to logon
>>>
>>> "Aladdin" <rimvydas@rimvydas.info> wrote in message 
>>> news:h6drgf$iu1$1@trimpas.omnitel.net...
>>>> Taigi turiu Windows 2003 domene enterprise CA. Juzeriams padalinti 
>>>> smart card sertifikatai. Tai padaryta kol kas testiniais tikslais ir 
>>>> ganetinai neseniai. Juzeriams, kuriems isduoti sertifikatai uzstatyta 
>>>> kad jie butu privalomi ir kad slaptazodis niekada expire nedarytu. 
>>>> Gryzo keli vartotojai po atostogu. nebegali isiloginti:/ Ziuriu ju 
>>>> loga - matau stai ka:
>>>>
>>>> Event Type: Error
>>>> Event Source: Smart Card Logon
>>>> Event Category: None
>>>> Event ID: 7
>>>> Date: 2009.08.17
>>>> Time: 08:07:06
>>>> User: N/A
>>>> Computer: USER
>>>> Description:
>>>> An error occurred while signing a message using the inserted smart 
>>>> card: Logon failure: the specified account password has expired.
>>>>
>>>>
>>>> For more information, see Help and Support Center at 
>>>> http://go.microsoft.com/fwlink/events.asp.
>>>> Data:
>>>> 0000: 32 05 00 00               2...
>>>>
>>>> Atrodo paaiskinimas gana paprastas - bet tai gi pass be expire 
>>>> padarytas.
>>>>
>>>> Nuimu reikalavima sertivikatui. Uzstatau pass, juzeris dar ji 
>>>> pasikeicia. Su pass isilogina. Kai tik bando logintis su kortele - vel 
>>>> tas pats loguose. Kame galetu buti saknys, gal kas susidurete? Google 
>>>> nieko padoraus nepasake:( Dekui.
>>>
>>>
>>
>>
>