GINA with smart card logon

From: Shehan (shehan@rediffmail.com)
Date: 12/27/02 

From: shehan@rediffmail.com (Shehan)
Date: 26 Dec 2002 20:45:40 -0800

Hi

I have written a GINA for Windows 2000 sometime back which can
completely replace MSGINA. It can handle interactive logon with
username and password. I used LsaLogonUser() for handling the logon.

Now I have to provide smart card logon facility in the same GINA. I
have read from MSDN and some other documents that when GINA detects
WLX_SAS_TYPE_SC_INSERT SAS, it must display the user interface for
entering the PIN. The PIN must be collected by the GINA and passed to
the LSA. According to that article, the rest of the authentication
process will be handled by LSA itself.

(1) Is that the only thing the custom GINA has to do?
(2) If so, through what interface the PIN can be given to LSA? (I
didnt find any PIN parameter in LsaLogonUser.)
(3) What are the changes to be made in the above said GINA so as to
make it suitable for smart card logon?

If anybody has any idea regarding these aspects, please help me. Any
links or pointers or sample code?

Shehan

Relevant Pages

  • Re: Replacement GINA using smart cards fail to display user Taskbar and user Icons.
    ... The key GINA callbacks are ... > mean that msgina's wlxloggedoutsas function is displaying the msgina logon ...
    (microsoft.public.platformsdk.security)
  • Re: msgina
    ... >>> is there a way to make msgina start my exe if login was successful? ... you can look into using C++ to create your own gina ... in addition to standard logon i wwant PC-s to report to my ... you manage to get the flag updated. ...
    (microsoft.public.vb.general.discussion)
  • Re: Unique Windows XP Authentication
    ... Is it possible to do the same thing in Vista & if it is, ... GINA is deprecated; it's no longer used in Windows Vista or Windows Server ... This means that before the logon ...
    (microsoft.public.windowsxp.security_admin)
  • Re: networking functionality
    ... So,Is it that socket functions and wininet functions are not guaranteed to ... work in GINA? ... Won't the network stack be up? ... I hook on to the Logon dialog box similar to ...
    (microsoft.public.win32.programmer.networks)
  • Re: Replacement GINA using smart cards fail to display user Taskbar and user Icons.
    ... Please see [mstanley] comments below: ... our company has had a FULL replacement GINA since 2000. ... How exactly does your software work with the hardware to produce a logon? ... The reason I ask is because if you pass-through to wlxloggedoutsas (as you ...
    (microsoft.public.platformsdk.security)