Apple Mac OS X v10.4 - Manual (Page 7)

Chapter 2 Setting Up Your Smart Card 7
5 To back up the original authorization file and create a separate file to modify, enter:
cp authorization authorization.orig
cp authorization /tmp/authorization.mod
6 Open the authorization.mod file you just created in a text editor or property list editor.
The file is located in the tmp folder on your startup drive:
/tmp/authorization.mod
7 The authorization.mod file is made up of a list of properties arranged in a hierarchy of
dictionaries. At the root level of the property list is the
rights
dictionary, which
contains a long list of other dictionaries.
Find the
system.login.console
dictionary in the
rights
dictionary. It contains an
array called mechanisms that must be modified.
8 Make the following changes to the mechanisms array within the system.login.console
dictionary:
a Add builtin:smartcard-sniffer,privileged after the item
builtin:auto-login,privileged .
b Delete
authinternal
.
c Add builtin:authenticate,privileged after the item
builtin:reset-password,privileged
.
9 At the root level of the property list is the rules dictionary.
Find the
authenticate
dictionary. It contains an array called
mechanisms
that must be
modified.
10 Make the following changes to the mechanisms array within the authenticate
dictionary.
a Add builtin:smartcard-sniffer,privileged to the beginning
of the mechanisms array.
b Delete
authinternal
.
c Add builtin:authenticate,privileged after the item
builtin:authenticate .
11 Save your changes.
12 Your original session should still be running in Terminal. To replace the actual
authorization file with the edited version, enter:
cp /tmp/authorization.mod /etc/authorization
The changes take place immediately; you don’t need to restart the system.
After smart card login is enabled, the system starts checking whether a card reader is
attached to the computer. Unlike with previous versions of smart card software, you do
not need to enter additional commands for your computer to recognize the reader.