Logon Client for Linux
Enterprise-Grade Smart Card Authentication for Linux Workstations
Multi-Workstation Logon, Certificate-to-Role Mapping, Multi-Certificate Support
Why It Stands Out
Our solution goes far beyond the limited capabilities of standard Linux smart card implementations. The Comtarsia Logon Client for Linux is a powerful and feature-rich solution designed specifically for enterprises. While smart card login on Linux is often basic or fragmented, this client provides a comprehensive, fully integrated smart card experience—bringing enterprise-level functionality to Linux environments and allowing organizations to extend the full security and management benefits across their infrastructure without compromises.
Complete Authentication Framework
While most Linux systems only offer limited smart card login, the Comtarsia Logon Client delivers a complete framework, comparable to enterprise Windows environments.
Centralized Control
Includes fine-grained user-role mapping, multi-session control, and full smart card certificate handling—all managed centrally from your directory.
Designed for Enterprise IT
Perfectly suited for environments requiring strong authentication, centralized policy enforcement, and multi-device coordination.
Key Features
Smart Card Authentication – Reimagined for Linux
Multi-Certificate Support
Use multiple certificates on a single smart card for different roles, permissions, or services.
Smart Card to Role Mapping
Dynamically assign local or domain-specific system roles based on the user's certificate identity.
Multi-Workstation Control
A smart card links to one device, but all associated workstations are automatically locked or logged in/off together.
Multi-Desktop Support
Seamlessly integrates into multi-session setups and various graphical desktop environments.
Custom Lock & Logoff Actions
Trigger custom scripts or system tasks during lock and logoff events for automation and security enforcement.
Scripting & Automation
Utilize hooks for custom scripts during authentication, session lock, or logoff events to automate system tasks.
Smart Card Login on Linux – Feature Comparison
See how our solution provides a truly enterprise-ready experience.
| Feature / Capability | Comtarsia Logon Client | Standard Linux Smart Card Login |
|---|---|---|
| Full Smart Card Login Support | ✅ Yes – fully integrated | ⚠️ Partial or limited |
| Multi-Certificate Support | ✅ Yes | ❌ No or manual setup required |
| LDAP Integration | ✅ Native support with mapping | ⚠️ Possible, but not integrated |
| Smart Card to Role Mapping | ✅ Dynamic system role assignment | ❌ Not supported |
| Multi-Workstation Logon/Logoff/Lock Control | ✅ Yes – centralized session control | ❌ Not available |
| Multi-Desktop Session Support | ✅ Yes | ⚠️ Limited or manual configuration |
| Custom Lock/Logoff Actions | ✅ Fully configurable | ❌ Not supported |
| Group Mapping via LDAP | ✅ Automatic | ⚠️ Requires custom scripts |
| SSL/TLS Certificate Handling | ✅ Full support (client/server) | ⚠️ Basic support, manual configuration |
| Failover & Load Balancing via DNS-SRV | ✅ Yes | ❌ Not available |
| Enterprise Software Deployment Ready | ✅ Designed for enterprise rollout | ❌ Manual installation & setup |
| Customizability for Enterprise Use | ✅ Fully customizable | ⚠️ Very limited |
| Ongoing Support & Maintenance | ✅ Vendor-supported | ❌ Community/self-support only |
Seamless Integration & Automation
Built to work with your existing enterprise infrastructure and workflows.
Technical Integration
- LDAP Compatibility: Integrates with enterprise directories using standard UNIX LDAP object classes (`posixAccount`, `posixGroup`, `shadowAccount`).
- SSL/TLS Support: Full support for secure communication using server and client certificates.
- SASL Support: Advanced authentication mechanisms including Digest-MD5 or SSL client certificates.
- DNS-SRV Failover: Automatically connects to available directory servers for high reliability and performance.
Extended Capabilities
- Automated Group Mapping: Automatically assign users to local Linux groups based on their LDAP group memberships.
- Seamless Software Deployment: Easily deploy and manage the client using enterprise software distribution tools.
- Customizability: Tailored adjustments to meet specific enterprise needs are supported and implemented quickly by our development team.
Upgrade to Enterprise-Grade Smart Card Login on Linux
Bring the full power of smart card authentication to your Linux workstations and servers. Contact us to learn how the Comtarsia Logon Client can secure and simplify your heterogeneous environment.