Query: pam_smartcard
OS: mojave
Section: 8
Format: Original Unix Latex Style Formatted with HTML and a Horizontal Scroll Bar
pam_smartcard(8) BSD System Manager's Manual pam_smartcard(8)NAMEpam_smartcard -- Smartcard PAM moduleSYNOPSIS[service-name] function-class control-flag pam_smartcard [options]DESCRIPTIONThe Smartcard PAM module supports authentication function class. In terms of the function-class parameter, this is ``auth.'' The Smartcard Authentication Module This module permits or denies users based on smartcard authentication support in the Open Directory database, and the presence of an appro- priate smartcard in the reader attached to the local machine. When a card is locked, the user is asked to unlock it with his PIN. The following options may be passed to this account management module: no_check_shell Continues evaluation even if user's shell is not valid. Normally, users with a shell like /usr/bin/false are considered as disabled. no_ignore Return failure when an appropriate smartcard is not present.EXAMPLEAdding the following line on the top of the /etc/pam.d/sudo enables smartcard support for sudo: auth sufficient pam_smartcard.soSEE ALSOpam.conf(5), pam(8) SmartCardServices(7)BSDAugust 27, 2015 BSD