The Smartcard Authentication Module

This module permits or denies users based on smartcard authentication support in the Open Directory database, and the presence of an appropriate smartcard in the reader attached to the local machine. When a card is locked, the user is asked to unlock it with his PIN.

The following options may be passed to this account management module:

no_check_shell

Continues evaluation even if user's shell is not valid. Normally, users with a shell like /usr/bin/false are considered as disabled.

no_ignore

Return failure when an appropriate smartcard is not present.