pam_pkcs11(8)						    System Administration tools 					     pam_pkcs11(8)

NAME

       pam_pkcs11 - PAM Authentication Module for PKCS#11 token libraries

SYNOPSIS

       pam_pkcs11.so [debug] [configfile=<configfile>]

DESCRIPTION

       This Linux-PAM login module allows a X.509 certificate based user login. The certificate and its dedicated private key are thereby accessed
       by means of an appropriate PKCS #11 module. For the verification of the users' certificates, locally stored  CA	certificates  as  well	as
       either online or locally accessible CRLs are used.

CONFIGURATION

       The program that needs a PAM service should be configured in /etc/pam.conf or /etc/pam.d/<servicename>.

       pam_pkcs11 can be used in the <auth> PAM chain.

       For  details  on  how  to  configure  PAM services, see the PAM documentation for your system. This manual does not cover PAM configuration
       details. The existing PAM service definitions for other applications on your system is also a good source for examples on how to  configure
       a PAM service.

FILES

       /etc/pam_pkcs11/pam_pkcs11.conf
       /usr/lib/pam_pkcs11/*_mapper.so

AUTHOR

       Original PAM-pkcs11 was written by Mario Strasser <mast@gmx.net>.  Newer versions are from Juan Antonio Martinez <jonsito@teleline.es>.

REPORTING BUGS

       Report bugs ideas, comments, bug-fixes and so to: Juan Antonio Martinez <jonsito@teleline.es>

SEE ALSO

       pam(8), pam_pkcs11.conf(5), PAM Systems Administrator Guide, README.mappers file, PAM-PKCS#11 User Manual.

Mario Strasser							    15-Feb-2005 						     pam_pkcs11(8)