Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

pkcs11_inspect(1) [debian man page]

pkcs11_inspect(1)						    PAM PKCS#11 						 pkcs11_inspect(1)

pkcs11_inspect - print certificate contents SYNOPSIS
pkcs11_inspect [debug] [config_file=<filename>] DESCRIPTION
pkcs11_inspect uses the pam_pkcs11 library infrastructure to get the content of a certificate and display it. pkcs11_inspect uses the same configuration file and arguments than pam_pkcs11(8) PAM module. It loads defined mapper modules, and use them to look into the certificate for required entries (ie: ms_mapper looks for ms UPN entries, and so on). When a mapper module finds a proper entry in the certificate, it converts to UTF-8 and print it to stdout. OPTIONS
debug Enable debugging output. config_file=<filename> Sets the configuration file to use. Default value is /etc/pam_pkcs11/pam_pkcs11.conf. As it uses the same configuration file as pam_pkcs11, all pam_pkcs11 options are also available. Note that some of them have no sense in a non-PAM environment, so they will be ignored. Some mapper options (mapfile, ignorecase) have no effect on certificate contents, so they will be ignored too. RETURN VALUE
On success pkcs11_inspect prints on stdout all certificate contents that are found for mappers and returns 0. On error it returns 1. FILES
/etc/pam_pkcs11/pam_pkcs11.conf EXAMPLES
To run this program the standard way, insert a smart card in the reader and type: pkcs11_inspect Alternatively you can specify options: pkcs11_inspect debug config_file=${HOME}/.pam_pkcs11.conf AUTHORS
Juan Antonio Martinez <> SEE ALSO
pam_pkcs11(8), pklogin_finder(1) PAM-PKCS11 User Manual Juan Antonio Martinez Aug 2005 pkcs11_inspect(1)

Check Out this Related Man Page

pam_pkcs11(8)						    System Administration tools 					     pam_pkcs11(8)

pam_pkcs11 - PAM Authentication Module for PKCS#11 token libraries SYNOPSIS [debug] [configfile=<configfile>] DESCRIPTION
This Linux-PAM login module allows a X.509 certificate based user login. The certificate and its dedicated private key are thereby accessed by means of an appropriate PKCS #11 module. For the verification of the users' certificates, locally stored CA certificates as well as either online or locally accessible CRLs are used. CONFIGURATION
The program that needs a PAM service should be configured in /etc/pam.conf or /etc/pam.d/<servicename>. pam_pkcs11 can be used in the <auth> PAM chain. For details on how to configure PAM services, see the PAM documentation for your system. This manual does not cover PAM configuration details. The existing PAM service definitions for other applications on your system is also a good source for examples on how to configure a PAM service. FILES
/etc/pam_pkcs11/pam_pkcs11.conf /usr/lib/pam_pkcs11/* AUTHOR
Original PAM-pkcs11 was written by Mario Strasser <>. Newer versions are from Juan Antonio Martinez <>. REPORTING BUGS
Report bugs ideas, comments, bug-fixes and so to: Juan Antonio Martinez <> SEE ALSO
pam(8), pam_pkcs11.conf(5), PAM Systems Administrator Guide, README.mappers file, PAM-PKCS#11 User Manual. Mario Strasser 15-Feb-2005 pam_pkcs11(8)
Man Page

Featured Tech Videos