I'm wondering if anybody who actually knows this can shed some light on how it works.
I'm attempting to get Certificate Based SmartCards (Yubikeys) to work with FreeIPA so
I can connect terminals and have MFA domain wide.
The issue is that on Debian PC's, the process isn't documented very well, or even
how all the components interact.
Could anybody shed some light on how each program interacts, from OpenSC to SSSD talking
to FreeIPA to validate the Cert, how does it all work?