1pkcs11_inspect(1) User Commands pkcs11_inspect(1)
2
3
4
6 pkcs11_inspect - print certificate contents
7
9 /usr/lib/pam_pkcs11/pkcs11_inspect [debug] [config_file=filename]
10
11
13 pkcs11_inspect uses the pam_pkcs11 library infrastructure to obtain the
14 content of a certificate and display it.
15
16
17 pkcs11_inspect uses the same configuration file and arguments as the
18 pam_pkcs11(5) PAM module. It loads defined mapper modules, and uses
19 them to look into the certificate for required entries, that is,
20 ms_mapper looks for ms UPN entries, and so forth.
21
22
23 When a mapper module finds a proper entry in the certificate, it con‐
24 verts to UTF-8 and prints it to stdout.
25
27 The following options are supported:
28
29 config_file=fileame Set the configuration file. The default value is
30 /etc/security/pam_pkcs11/pam_pkcs11.conf.
31
32
33 debug Enable debugging output.
34
35
36
37 As it uses the same configuration file as pam_pkcs11(5), all of the
38 pam_pkcs11 options are available. Some of these options make no sense
39 in a non-PAM environment, and are therefore ignored. Some mapper
40 options (mapfile, ignorecase) have no effect on certificate contents,
41 and they are ignored as well.
42
44 The following exit values are returned:
45
46 0 Successful completion.
47
48 pkcs11_inspect prints on stdout all certificate contents that are
49 found for mappers.
50
51
52 1 An error occurred.
53
54
56 Example 1 Using pkcs_inspect
57
58
59 The following example runs the pkcs_inspect command without any
60 options:
61
62
63 % pkcs11_inspect
64
65
66
67 Example 2 Using pkcs_inspect with Options
68
69
70 The following example runs the pkcs_inspect command with options:
71
72
73 % pkcs11_inspect debug config_file=${HOME}/.pam_pkcs11.conf
74
75
76
78 /etc/security/pam_pkcs11/pam_pkcs11.conf
79
80
81
82
84 Juan Antonio Martinez, jonsito@teleline.es
85
87 See attributes(5) for descriptions of the following attributes:
88
89
90
91
92 ┌─────────────────────────────┬─────────────────────────────┐
93 │ ATTRIBUTE TYPE │ ATTRIBUTE VALUE │
94 ├─────────────────────────────┼─────────────────────────────┤
95 │Availability │SUNWpampkcs11u, SUNWpamp‐ │
96 │ │kcs11r, SUNWpampkcs11-docs │
97 ├─────────────────────────────┼─────────────────────────────┤
98 │Interface Stability │Uncommitted │
99 └─────────────────────────────┴─────────────────────────────┘
100
102 pklogin_finder(1), attributes(5), pam_pkcs11(5)
103
104
105 PAM-PKCS11 User Manual, http://www.opensc-project.org/pam_pkcs11
106
107
108
109SunOS 5.11 16 Jul 2008 pkcs11_inspect(1)