Novell Enhanced Smart Card Method 3.0.1, Installation Manual

Page: 23 / 46

Configuring the Client 23
no
vd
ocx
(e
n)
6 Ap
ril 20
07
To enable passive mode login, the following registry keys must be set:
[HKEY_LOCAL_MACHINE\SOFTWARE\Novell\NWGINA]
"PassiveMode"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login]
"PassiveModeNDSLogin"=dword:00000001
"PassiveModeNDSLoginSilent"=dword:00000000 or 00000001
"PassiveModeNDSLoginRequired"=dword:00000000 or 00000001
Registry Setting Descriptions:
PassiveMode: (0/1) default is 0
0 = normal mode
1 = passive mode
PassiveModeNDSLogin: (0/1) default is 0
0 = don't do Novell login
1 = do Novell login
PassiveModeNDSLoginSilent: (0/1) default is 0
0 = report Novell login errors
1 = don't report Novell login errors
PassiveModeNDSLoginRequired: (0/1) default is 0
0 = don't require Novell login
1 = require Novell login
The following is additional information regarding the Novell Clients Passive Mode and the method:
Š
If PassiveModeNDSLoginRequired set to True (1), the login experience requires a successful
Novell authentication in order to succeed.
Login scripts are not processed by NWGINA in passive mode. The workaround is to run them
after the GINA login. You can do this by placing a run entry in the registry or you can create an
entry in the startup file for Novell login:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\R
un]
"nwscript=reg_expand_sz:loginw32.exe %username% /NA /CONT
Š
In passive mode, the method's card monitoring functionality does not work when set to Lock
Workstation on card removal. This is because MSGINA (not NWGINA) is used for the
workstation Lock/Unlock functionality.