config:
- TSG and TS 2008 on just one box
- AD on a second box
- XP SP3 or Vista SP1 client with Gemalto .net Smart Card

problem:
- logon trough TSG with smart card fails

more:
- logon with smart card on directly on the server works fine
- logon with the smart card directly on TS 2008 works fine too
- logon with user / pwd (ntml) directly on the box or TS or even TSG / TS
works fine
- logon on TSG with smart card is also fine; on the TS logon screen it takes
3-4 seconds, then smart card will be recognised - but then nothing happens
anymore
- if i above case i chose the smart card manually and enter the pin all
works fine
- if i do not enter it from hand, then rdp session closes after 2 minutes
- no errors in event logs or on the screens
- and finally: if i logon with user / pwd, disconnect then the session and
re-connect the disconnected session with the smart card all works fine

why the initial logon with a smart card trough TSG does not work?

we reinstalled all 2 times, spend a lot of time to understand the problem -
for me it looks to be a bug

any suggestions?

thanks
Bruno