Slashdot Mirror
SmartCards, BSD and Linux?
Gilles Cherix asks: "I just come back from an IT Expo where Sun demonstrated their brand new SunRay appliances. These are cool and cute little boxes with a smart card reader ... the card is used for autentication and everything is executed from a Sparc server. I'm wondering if my favorite Open Source operating systems can do something similar: that is, if there is support for smartcard reader/writers in *BSD or Linux. The rest is a question of some coding but that would be an interesting alternative for me since I have to manage new accounts everyday and I don't want to spend very much money for Sun hardware."
You should have paid attention to the tech specs, or asked more questions....
That's not Ethernet running out of there. Well, it's Ethernet hardware, but it's a proprietary transport. The abstraction necessary to get such a setup working is not anywhere close to being implemented. The entire Sound and Vidoe format is rewritten to be abstracted from the actual display/audio hardware. It works something like this, though I'm not sure of the "real" details....
X Framebuffer/Sound buffer --> Abstraction layer --> Session Manager --> Transport driver --> SunRay --> Abstraction realizer --> Display Hardware
We probably have the working of the display and sound abstractors (Virtual Framebuffers and the architecture of ESound), but the rest will all have to be implemented. The speed form the thing comes from the fact that all of the abstraction/encoding/decoding is done in hardware. Software abstraction and realization will be VERY slow and prohibitive of just running cheap standalone Linux systems.
In addition, the packages to make the server a SunRay server change the session management of the processes run by a user, in that it needs to be able to intelligently stop and start (not kill and restart) processes as displays attach and reattach, and handle extended swapping and reallocating of resources. The fact that it's a smartcard controlling it is trivial compared to the engineering needed to get the process working. For tha tmatter, you can just encode a small PAM module that lives on the client to authenticate by fingerprints, voice, or whatever
If you get it figured out, more power to you :)
This space for rent. Call 1-800-STEAK4U
Check out MUSCLE...I think that is what you are looking for. The site for it is here. IIRC, this project was started/is maintained by someone attending the grandest university of them all