1pklogin_finder(1)                User Commands               pklogin_finder(1)
2
3
4

NAME

6       pklogin_finder - map certificates into a user
7

SYNOPSIS

9       /usr/lib/pam_pkcs11/pklogin_finder [debug] [config_file=filename]
10
11

DESCRIPTION

13       pklogin_finder  uses  the pam_pkcs11 library infrastructure to interac‐
14       tively map a PKCS#11 provided certificate to a user.
15
16
17       pklogin_finder uses the same  configuration  file  and  arguments  than
18       pam_pkcs11(5)  PAM module. It loads defined mapper modules and tries to
19       find a map between found certificates and a user login.
20

OPTIONS

22       The following options are supported:
23
24       config_file=fileame    Set the configuration file.
25
26                              The     default     value     is      /etc/secu‐
27                              rity/pam_pkcs11/pam_pkcs11.conf.
28
29
30       debug                  Enable debugging output.
31
32                              The default is no debug.
33
34
35
36       As  it  uses  the  same configuration file as pam_pkcs11(5), all of the
37       pam_pkcs11 options are available. Some of these options make  no  sense
38       in  a  non-PAM  environment,  and  are  therefore  ignored. Some mapper
39       options (mapfile, ignorecase) have no effect on  certificate  contents,
40       and they are ignored as well.
41

EXIT STATUS

43       The following exit values are returned:
44
45       0    Successful completion.
46
47            pkcs11_inspect prints on stdout the login name and exits.
48
49
50       1    An error occurred.
51
52            A user mapping error was found.
53
54
55       2    An error occurred.
56
57            No user match was found.
58
59

EXAMPLES

61       Example 1 Using pklogin_finder
62
63
64       The  following  example  runs  the  pklogin_finder  command without any
65       options:
66
67
68         % pkcs11_inspect
69
70
71
72       Example 2 Using pklogin_finder with Options
73
74
75       The following example runs the pkcs_finder command with options:
76
77
78         % pklogin_finder debug config_file=${HOME}/.pam_pkcs11.conf
79
80
81

FILES

83       /etc/security/pam_pkcs11/pam_pkcs11.conf
84
85
86
87

AUTHORS

89       Juan Antonio Martinez, jonsito@teleline.es
90

ATTRIBUTES

92       See attributes(5) for descriptions of the following attributes:
93
94
95
96
97       ┌─────────────────────────────┬─────────────────────────────┐
98       │      ATTRIBUTE TYPE         │      ATTRIBUTE VALUE        │
99       ├─────────────────────────────┼─────────────────────────────┤
100       │Availability                 │SUNWpampkcs11u,   SUNWpamp‐  │
101       │                             │kcs11r, SUNWpampkcs11-docs   │
102       ├─────────────────────────────┼─────────────────────────────┤
103       │Interface Stability          │Uncommitted                  │
104       └─────────────────────────────┴─────────────────────────────┘
105

SEE ALSO

107       pkcs11_inspect(1), attributes(5), pam_pkcs11(5)
108
109
110       PAM-PKCS11 User Manual, http://www.opensc-project.org/pam_pkcs11
111
112
113
114SunOS 5.11                        17 Jul 2008                pklogin_finder(1)
Impressum