home | help
pam_pkcs11(8)		   System Administration tools		   pam_pkcs11(8)

NAME
     pam_pkcs11 - PAM Authentication Module for PKCS#11 token libraries

SYNOPSIS
     pam_pkcs11.so [debug] [configfile=<configfile>]

DESCRIPTION
     This  Linux-PAM  login  module allows a X.509 certificate based user login.
     The certificate and its dedicated private key are thereby accessed by means
     of an appropriate PKCS #11 module. For the verification of the users'  cer-
     tificates,  locally  stored CA certificates as well as either online or lo-
     cally accessible CRLs are used.

CONFIGURATION
     The program that needs a PAM  service  should  be	configured  in	/usr/lo-
     cal/etc/pam.conf or /usr/local/etc/pam.d/<servicename>.

     pam_pkcs11 can be used in the <auth> PAM chain.

     For details on how to configure PAM services, see the PAM documentation for
     your  system. This manual does not cover PAM configuration details. The ex-
     isting PAM service definitions for other applications  on	your  system  is
     also a good source for examples on how to configure a PAM service.

FILES
     /usr/local/etc/pam_pkcs11/pam_pkcs11.conf
     /usr/lib/pam_pkcs11/*_mapper.so

AUTHOR
     Original  PAM-pkcs11  was	written by Mario Strasser <mast@gmx.net>.  Newer
     versions are from Juan Antonio Martinez <jonsito@teleline.es>.

REPORTING BUGS
     Report bugs ideas, comments, bug-fixes and so  to:  Juan  Antonio	Martinez
     <jonsito@teleline.es>

SEE ALSO
     pam(8), pam_pkcs11.conf(5), PAM Systems Administrator Guide, README.mappers
     file, PAM-PKCS#11 User Manual.

Mario Strasser			   15-Feb-2005			   pam_pkcs11(8)

home | help