Initial commit: yourdev-session-pki package

Debian package for PKI-based session authentication with Orange AD.
- Direct PKINIT auth via pam_exec + kinit (bypasses SSSD certmap)
- GDM smartcard login with SafeNet eToken / Thales
- Automatic Kerberos TGT via PKINIT
- Compatible with orange-yourdev-login package
This commit is contained in:
Tallagrand Thierry
2026-05-15 18:54:50 +02:00
commit 8686a76b06
12 changed files with 755 additions and 0 deletions

View File

@@ -0,0 +1,15 @@
Package: yourdev-session-pki
Version: 1.0.0
Architecture: all
Maintainer: Tallagrand Thierry <thierry.tallagrand@orange.com>
Installed-Size: 128
Depends: sssd, sssd-krb5, krb5-user, libpam-sss, opensc, p11-kit, openssl, ca-certificates, dconf-cli, libpam-modules
Recommends: gdm3, gnome-keyring, pinentry-gnome3
Section: admin
Priority: optional
Homepage: https://ad.francetelecom.fr
Description: YourDev PKI-based session authentication for Orange AD
Configure SSSD, Kerberos (PKINIT), and PAM for smartcard
(Safenet eToken / Thales) and password-based login with
automatic Kerberos ticket (TGT) generation via AD.FRANCETELECOM.FR.
Supports GDM, SSH, and console login with both methods.