By ShortCurl on

Is there a module to assist with allowing users to log into a Drupal site using a common access card (PKI authentication)?

⋅ Categories: Drupal 6.x, Drupal 7.x

Comments

cog.rusty’s picture

cog.rusty commented

I don't think so. Searching in http://drupal.org/project/modules for either PKI or CAC doesn't get anything relevant.

zurka’s picture

zurka commented

For what it's worth, I too am looking for a module that supports CAC for authentication. I've started to look at Secure Site. It may be useful for the insights it provides but it doesn't look like something one can just drop in. I'd prefer not to write my own solution.

Does anyone have any knowledge about authenticating to Drupal independently of the standard authentication form? With CAC it seems like the standard form is superfluous because all the user data comes from the CAC. Perhaps I'm not thinking about this enough in a Drupal way.

Thanks,
Steve

jnojr’s picture

jnojr commented

I think the answer might be yes!

We wanted to look at this for a project I'm working on, and one of our developers got some files and info from someone that did this. Assuming we can make it work, I doubt there's any reason why I couldn't share. I will see if I can get the person who wrote it to drop it on forge.mil for everyone to use and improve.

Please feel free to contact me directly... I have a yahoo email address that's the same as my ID here.

jordan.schmitt’s picture

jordan.schmitt commented

We just installed Drupal the other day and beginning our transition from our legacy CMS to Drupal 6. Since this is for the DOD our first hurdle is dealing with CAC login. I will be sure to share any info we learn here. In addition, I noticed the certificate login module but have not had a chance to play with it yet -- http://drupal.org/project/certificatelogin .

jordan.schmitt’s picture

jordan.schmitt commented

I ended up writing my own module but CertificateLogin works. All you have to do is make the drupal username match the one of the certificate values. In our case we use the Subject CN as the drupal username.

After getting certificate login to work I ended up writing my own module. We are currently in the process of transitioning from a home-grown CMS to Drupal. We are going tohave the run the sites side by side during the transition process. When the user logs into the legacy site we log them into the drupal sections behind the scenes.

Swampcritter’s picture

Swampcritter
Location Orange Park, Florida
commented

So did your modifications actually allow you to login via an actual CAC card (i.e. card inserted into the machine where you are accessing the website from) or just access the PKI certificate stored on said machine/browser profile? Also, any time frame on the module being released to Drupal?

grayaj88’s picture

grayaj88 commented

Was anyone able to enable the CAC login on their Drupal site?

Is there a way that this module CertificateLogin would be CAC enabled?

Thanks.

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented

There's a new PKI module focused first and formost on CAC at http://drupal.org/sandbox/rickwelch/1663258

I encourage folks to test it out and give feedback.

--
Morris Animal Foundation

colan’s picture

colan
he/him
Primary language English
Location Toronto 🇨🇦
commented

Looks like the maintainer has been trying to promote it to a full project, but hasn't had much luck: #1775964: [D7] PKI Authentication.