[Vpn-help] FW: Connection before domain login

Matthew Grooms mgrooms at shrew.net
Sat Dec 12 14:46:44 CST 2009


Evan Kinney wrote:
> This is actually a whole lot more complicated than it sounds.
> 
> What you’re referring to used to be called GINA, and was pretty easy to 
> implement due to XP’s extremely lax security model. The Cisco client is 
> using GINA to provide that dialog before login. Microsoft essentially 
> removed GINA support in Vista when they redesigned winlogon, but 
> introduced a new model that uses new components, referred to as 
> Credential Providers. Windows 7 also added the Windows Biometric 
> Framework, which, in the future, will be extensible to devices other 
> than biometric ones.
> 
> So, short answer: as far as I know, Matthew hasn’t done anything with 
> CPs in Access Manager. You won’t be able to do what you’re asking until 
> this changes.
> 

I think your assessment is spot on. This is a feature we have always 
planned to provide, we just haven't gotten that far yet. In a perfect 
world, it may be something we can tackle in the 2nd 1/4 or 2010.

-Matthew



More information about the vpn-help mailing list