A Guest user with smartcard cannot authenticate on Host when Guest Access Security is set for Directory Services and "always logon with smartcard" if he needs to authenticate with a custom attribute from the Subject field, instead of using the whole content of that field.