1pklogin_finder(1) User Commands pklogin_finder(1)
2
3
4
6 pklogin_finder - map certificates into a user
7
9 /usr/lib/pam_pkcs11/pklogin_finder [debug] [config_file=filename]
10
11
13 pklogin_finder uses the pam_pkcs11 library infrastructure to interac‐
14 tively map a PKCS#11 provided certificate to a user.
15
16
17 pklogin_finder uses the same configuration file and arguments than
18 pam_pkcs11(5) PAM module. It loads defined mapper modules and tries to
19 find a map between found certificates and a user login.
20
22 The following options are supported:
23
24 config_file=fileame Set the configuration file.
25
26 The default value is /etc/secu‐
27 rity/pam_pkcs11/pam_pkcs11.conf.
28
29
30 debug Enable debugging output.
31
32 The default is no debug.
33
34
35
36 As it uses the same configuration file as pam_pkcs11(5), all of the
37 pam_pkcs11 options are available. Some of these options make no sense
38 in a non-PAM environment, and are therefore ignored. Some mapper
39 options (mapfile, ignorecase) have no effect on certificate contents,
40 and they are ignored as well.
41
43 The following exit values are returned:
44
45 0 Successful completion.
46
47 pkcs11_inspect prints on stdout the login name and exits.
48
49
50 1 An error occurred.
51
52 A user mapping error was found.
53
54
55 2 An error occurred.
56
57 No user match was found.
58
59
61 Example 1 Using pklogin_finder
62
63
64 The following example runs the pklogin_finder command without any
65 options:
66
67
68 % pkcs11_inspect
69
70
71
72 Example 2 Using pklogin_finder with Options
73
74
75 The following example runs the pkcs_finder command with options:
76
77
78 % pklogin_finder debug config_file=${HOME}/.pam_pkcs11.conf
79
80
81
83 /etc/security/pam_pkcs11/pam_pkcs11.conf
84
85
86
87
89 Juan Antonio Martinez, jonsito@teleline.es
90
92 See attributes(5) for descriptions of the following attributes:
93
94
95
96
97 ┌─────────────────────────────┬─────────────────────────────┐
98 │ ATTRIBUTE TYPE │ ATTRIBUTE VALUE │
99 ├─────────────────────────────┼─────────────────────────────┤
100 │Availability │SUNWpampkcs11u, SUNWpamp‐ │
101 │ │kcs11r, SUNWpampkcs11-docs │
102 ├─────────────────────────────┼─────────────────────────────┤
103 │Interface Stability │Uncommitted │
104 └─────────────────────────────┴─────────────────────────────┘
105
107 pkcs11_inspect(1), attributes(5), pam_pkcs11(5)
108
109
110 PAM-PKCS11 User Manual, http://www.opensc-project.org/pam_pkcs11
111
112
113
114SunOS 5.11 17 Jul 2008 pklogin_finder(1)