The K Display Manager (KDM) is a PAM application providing graphical login. The following sections document how to configure and use KDM with smart card authentication.
To configure KDM for smart card
vastool smartcard configure pam kde
Unlike GDM, KDM presents both a Username: and a Password: prompt simultaneously to the user. You can not change these prompts. The prompt-vassc-user and prompt-vassc-pin options in the [pam_vas] section of vas.conf have no effect.
Note that KDM displays additional information from the Authentication Services PAM module in a pop-up window, which only disappears when the user clicks OK. Thus, the prompt-style and show-token-status options are not recommended for KDM.
To disable remote login
Typically this file is located at /etc/X11/xdm/xdm-config or /usr/share/config/kdm/kdmrc on Redhat.
To perform smart card login by means of K Display Manager (KDM)
KDM calls the pam_vas_smartcard module to perform the authentication.
Note: KDM displays the Username: and Password: prompts regardless of the presence or absence of the smart card in the reader. In addition, KDM does not allow you to enter an empty username. While GDM permits an unspecified username, KDM requires one. Failure to provide a username results in a "login failed" message.