pklogin_finder(1) [opensolaris man page]

pklogin_finder(1)						   User Commands						 pklogin_finder(1)

NAME

       pklogin_finder - map certificates into a user

SYNOPSIS

       /usr/lib/pam_pkcs11/pklogin_finder [debug] [config_file=filename]

DESCRIPTION

       pklogin_finder uses the pam_pkcs11 library infrastructure to interactively map a PKCS#11 provided certificate to a user.

       pklogin_finder  uses  the same configuration file and arguments than pam_pkcs11(5) PAM module. It loads defined mapper modules and tries to
       find a map between found certificates and a user login.

OPTIONS

       The following options are supported:

       config_file=fileame    Set the configuration file.

			      The default value is /etc/security/pam_pkcs11/pam_pkcs11.conf.

       debug		      Enable debugging output.

			      The default is no debug.

       As it uses the same configuration file as pam_pkcs11(5), all of the pam_pkcs11 options are available. Some of these options make  no  sense
       in  a non-PAM environment, and are therefore ignored. Some mapper options (mapfile, ignorecase) have no effect on certificate contents, and
       they are ignored as well.

EXIT STATUS

       The following exit values are returned:

       0    Successful completion.

	    pkcs11_inspect prints on stdout the login name and exits.

       1    An error occurred.

	    A user mapping error was found.

       2    An error occurred.

	    No user match was found.

EXAMPLES

       Example 1 Using pklogin_finder

       The following example runs the pklogin_finder command without any options:

	 % pkcs11_inspect

       Example 2 Using pklogin_finder with Options

       The following example runs the pkcs_finder command with options:

	 % pklogin_finder debug config_file=${HOME}/.pam_pkcs11.conf

FILES

       /etc/security/pam_pkcs11/pam_pkcs11.conf

AUTHORS

       Juan Antonio Martinez, jonsito@teleline.es

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWpampkcs11u,	SUNWpamp-  |
       |			     |kcs11r, SUNWpampkcs11-docs   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Uncommitted		   |
       +-----------------------------+-----------------------------+

SEE ALSO

       pkcs11_inspect(1), attributes(5), pam_pkcs11(5)

       PAM-PKCS11 User Manual, http://www.opensc-project.org/pam_pkcs11

SunOS 5.11							    17 Jul 2008 						 pklogin_finder(1)

Check Out this Related Man Page

pkcs11_eventmgr(1)						 PAM-pkcs11 tools						pkcs11_eventmgr(1)

NAME

       pkcs11_eventmgr - SmartCard PKCS#11 Event Manager

SYNTAX

       pkcs11_eventmgr [[no]debug] [[no]daemon] [polling_time=<secs> ] [expire_time=<secs>] [pkcs11_module=<module> ] [config_file=<filename>]

DESCRIPTION

       card_eventmgr  is a SmartCard Monitoring that listen to the status of the card reader and dispatch actions on several events. card_eventmgr
       can be used to several actions, like lock screen on card removal
       Three events are supported: card insert, card removal and timeout on removed card. Actions to take are specified in the configuration file

OPTIONS

       [no]debug
	      Enable debugging output. Default is no debug

       [no]daemon
	      Runs in background. If debug is unset, dettach also from tty. Default: no daemon

       polling_time=<secs>
	      Set polling timeout in secs. Defaults to 1 sec

       expire_time=<secs>
	      Set timeout on card removed. Defaults to 0 (never)

       config_file=<configuration file>
	      Sets de configuration file. Defaults to /etc/pam_pkcs11/card_eventmgr.conf

       pkcs11_module=<pkcs11.so library>
	      Sets the pkcs#11 library module to use. Defaults to /usr/lib/pkcs11/opensc-pkcs11.so

FILES

       /etc/pam_pkcs11/card_eventmgr.conf

       /usr/lib/pkcs11/opensc-pkcs11.so

EXAMPLES

       To run this program the standard way type:

       pkcs11_eventmgr

       Alternativly you can specify options:

       pkcs11_eventmgr nodebug nodaemon polling_time=5 config_file=${HOME}/.pkcs11_eventmgr.conf

BUGS

       Some PKCS#11 Libraries fails on card removal and re-insert.  to avoid this, pkcs11_eventmgr try to re-initialize stuff by calling  C_Final-
       ize() and C_Initialize() on card removal
       Some  apps  like  [xscreensaver-command]  may fail due to external events ( eg: try to unlock an unlocked session ).  In this case, command
       incorrectly returns error code.
       User shoult take care on this circumstance

AUTHORS

       Juan Antonio Martinez <jonsito@teleline.es>

SEE ALSO

       pam_pkcs11(8), card_eventmgr(5)
       README.eventmgr
       PAM-PKCS11 User Manual

Juan Antonio Martinez						       0.4.4							pkcs11_eventmgr(1)

Linux and UNIX Man Pages

pklogin_finder(1) [opensolaris man page]

Check Out this Related Man Page