pam_pkcs11(8) [centos man page]

pam_pkcs11(8)						    System Administration tools 					     pam_pkcs11(8)

NAME

       pam_pkcs11 - PAM Authentication Module for PKCS#11 token libraries

SYNOPSIS

       pam_pkcs11.so [debug] [configfile=<configfile>]

DESCRIPTION

       This Linux-PAM login module allows a X.509 certificate based user login. The certificate and its dedicated private key are thereby accessed
       by means of an appropriate PKCS #11 module. For the verification of the users' certificates, locally stored  CA	certificates  as  well	as
       either online or locally accessible CRLs are used.

CONFIGURATION

       The program that needs a PAM service should be configured in /etc/pam.conf or /etc/pam.d/<servicename>.

       pam_pkcs11 can be used in the <auth> PAM chain.

       For  details  on  how  to  configure  PAM services, see the PAM documentation for your system. This manual does not cover PAM configuration
       details. The existing PAM service definitions for other applications on your system is also a good source for examples on how to  configure
       a PAM service.

FILES

       /etc/pam_pkcs11/pam_pkcs11.conf
       /usr/lib/pam_pkcs11/*_mapper.so

AUTHOR

       Original PAM-pkcs11 was written by Mario Strasser <mast@gmx.net>.  Newer versions are from Juan Antonio Martinez <jonsito@teleline.es>.

REPORTING BUGS

       Report bugs ideas, comments, bug-fixes and so to: Juan Antonio Martinez <jonsito@teleline.es>

SEE ALSO

       pam(8), pam_pkcs11.conf(5), PAM Systems Administrator Guide, README.mappers file, PAM-PKCS#11 User Manual.

Mario Strasser							    15-Feb-2005 						     pam_pkcs11(8)

pkcs11_inspect(1)						    PAM PKCS#11 						 pkcs11_inspect(1)

NAME

       pkcs11_inspect - print certificate contents

SYNOPSIS

       pkcs11_inspect [debug] [config_file=<filename>]

DESCRIPTION

       pkcs11_inspect uses the pam_pkcs11 library infrastructure to get the content of a certificate and display it.

       pkcs11_inspect  uses the same configuration file and arguments than pam_pkcs11(8) PAM module. It loads defined mapper modules, and use them
       to look into the certificate for required entries (ie: ms_mapper looks for ms UPN entries, and so on).

       When a mapper module finds a proper entry in the certificate, it converts to UTF-8 and print it to stdout.

OPTIONS

       debug  Enable debugging output.

       config_file=<filename>
	      Sets the configuration file to use. Default value is /etc/pam_pkcs11/pam_pkcs11.conf.

       As it uses the same configuration file as pam_pkcs11, all pam_pkcs11 options are also available. Note that some of them have no sense in  a
       non-PAM	environment,  so  they	will be ignored. Some mapper options (mapfile, ignorecase) have no effect on certificate contents, so they
       will be ignored too.

RETURN VALUE

       On success pkcs11_inspect prints on stdout all certificate contents that are found for mappers and returns 0.

       On error it returns 1.

FILES

       /etc/pam_pkcs11/pam_pkcs11.conf

EXAMPLES

       To run this program the standard way, insert a smart card in the reader and type:

	pkcs11_inspect

       Alternatively you can specify options:

	pkcs11_inspect debug config_file=${HOME}/.pam_pkcs11.conf

AUTHORS

       Juan Antonio Martinez <jonsito@teleline.es>

SEE ALSO

       pam_pkcs11(8), pklogin_finder(1)
       PAM-PKCS11 User Manual

Juan Antonio Martinez						     Aug 2005							 pkcs11_inspect(1)