|
|
Apama for Smart Order Routing
|
|
pam_smartcard(5) Standards, Environments, and Macros pam_smartcard(5) NAME
pam_smartcard - PAM authentication module for Smart Card SYNOPSIS
/usr/lib/security/pam_smartcard.so DESCRIPTION
The Smart Card service module for PAM, /usr/lib/security/pam_smartcard.so, provides functionality to obtain a user's information (such as user name and password) for a smart card. The pam_smartcard.so module is a shared object that can be dynamically loaded to provide the nec- essary functionality upon demand. Its path is specified in the PAM configuration file pam.conf. See pam.conf(4). Smart Card Authentication Module The Smart Card authentication component provides the pam_sm_authenticate(3PAM) function to verify the identity of a smart card user. The pam_sm_authenticate() function collects as user input the PIN number. It passes this data back to its underlying layer, OCF, to perform PIN verification. If verification is successful, the module returns PAM_SUCCESS, and passes the username and password from the smart card to PAM modules stacked below.pam_smartcard. The following options can be passed to the Smart Card service module: debug syslog(3C) debugging information at LOG_DEBUG level. nowarn Turn off warning messages. verbose Turn on verbose authentication failure reporting to the user. Smart Card Module Configuration The PAM smart card module (pam_smartcard) can be configured in the PAM configuration file (/etc/pam.conf). For example, the following con- figuration on on the desktop (Common Desktop Environment) forces a user to use a smart card for logging in. The following are typical values set by 'smartcard -c enable', if the command is applied to the default configuration. dtlogin auth requisite pam_smartcard.so.1 dtlogin auth required pam_authtok_get.so.1 dtlogin auth required pam_dhkeys.so.1 dtsession auth requisite pam_smartcard.so.1 dtsession auth required pam_authtok_get.so.1 dtsession auth required pam_dhkeys.so.1 SEE ALSO
smartcard(1M), libpam(3LIB), pam(3PAM), pam_authenticate(3PAM), pam_start(3PAM), pam.conf(4), pam_authtok_check(5), pam_authtok_get(5), pam_authtok_store(5), pam_dhkeys(5), pam_passwd_auth(5), pam_unix_account(5), pam_unix_auth(5), pam_unix_session(5) NOTES
The pam_unix(5) module is no longer supported. Similar functionality is provided by pam_authtok_check(5), pam_authtok_get(5), pam_auth- tok_store(5), pam_dhkeys(5), pam_passwd_auth(5), pam_unix_account(5), pam_unix_auth(5), and pam_unix_session(5). SunOS 5.10 24 Oct 2002 pam_smartcard(5)
