author | Huie-Ying Lee <huieying.lee@oracle.com> |
Tue, 19 Jul 2016 14:22:34 -0700 | |
changeset 6432 | e821c64a5943 |
parent 5029 | 77413b29eb5a |
child 6731 | d80c638073cb |
permissions | -rw-r--r-- |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
1 |
'\" te |
6432
e821c64a5943
PSARC/2016/427 PAM_PKCS11 0.6.8
Huie-Ying Lee <huieying.lee@oracle.com>
parents:
5029
diff
changeset
|
2 |
.\" Portions Copyright (c) 2008, 2016, Oracle and/or its affiliates. All rights reserved. |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
3 |
.\" This manual page is derived from documentation obtained from the OpenSC organization (www.opensc-project.org). This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. This library is distributed in the hope that it is useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
5029
77413b29eb5a
22107485 More Userland component man page normalizations
Rich Burridge <rich.burridge@oracle.com>
parents:
2008
diff
changeset
|
4 |
.TH pam_pkcs11 7 "28 Oct 2015" "SunOS 5.12" "Standards, Environments, and Macros" |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
5 |
.SH NAME |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
6 |
pam_pkcs11 \- PAM Authentication Module for the PKCS#11 token libraries |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
7 |
.SH SYNOPSIS |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
8 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
9 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
10 |
\fBpam_pkcs11.so\fR [debug] [config_file=\fIfilename\fR] |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
11 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
12 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
13 |
.SH DESCRIPTION |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
14 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
15 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
16 |
The \fBpam_pkcs11\fR module implements \fBpam_sm_authenticate\fR(3PAM), which provides functionality to the PAM authentication stack. This module allows a user to login a system, using a X.509 certificate and its dedicated private key stored in a PKCS#11 token. This module currently supports the RSA algorithm only. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
17 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
18 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
19 |
To verify the dedicated private key is truly associated with the X.509 certificate, the following verification procedure is performed in this module by default: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
20 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
21 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
22 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
23 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
24 |
Generate 128 random byte data |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
25 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
26 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
27 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
28 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
29 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
30 |
Sign the random data with the private key and get a signature. This step is done in the PKCS#11 token. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
31 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
32 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
33 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
34 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
35 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
36 |
Verify the signature using the public key extracted from the certificate. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
37 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
38 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
39 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
40 |
For the verification of the users' certificates, locally stored CA certificates as well as either online or locally accessible CRLs are used. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
41 |
.SS "PAM CONFIGURATION" |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
42 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
43 |
.LP |
5029
77413b29eb5a
22107485 More Userland component man page normalizations
Rich Burridge <rich.burridge@oracle.com>
parents:
2008
diff
changeset
|
44 |
The \fBpam_pkcs11.so\fR service module can be used in the \fB<auth>\fR PAM chain. The program that needs a PAM service should be configured in \fB/etc/pam.conf\fR or \fB/etc/pam.d/\fR\fIservice\fR. For details on how to configure PAM services, see \fBpam.conf\fR(5). |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
45 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
46 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
47 |
The following example uses only \fBpam_pkcs11\fR for authentication: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
48 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
49 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
50 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
51 |
login auth requisite pam_pkcs11.so.1 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
52 |
login autho required pam_unix_cred.so.1 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
53 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
54 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
55 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
56 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
57 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
58 |
The following example uses \fBpam_pkcs11\fR for authentication with fallback to standard UNIX authentication: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
59 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
60 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
61 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
62 |
login auth sufficient pam_pkcs11.so.1 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
63 |
login auth requisite pam_authtok_get.so.1 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
64 |
login auth required pam_dhkeys.so.1 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
65 |
login auth required pam_unix_cred.so.1 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
66 |
login auth required pam_unix_auth.so.1 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
67 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
68 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
69 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
70 |
.SS "PAM_PKCS11 CONFIGURATION" |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
71 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
72 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
73 |
To configure the \fBpam_pkcs11\fR module, you must have the following information: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
74 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
75 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
76 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
77 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
78 |
Which PKCS #11 token you are going to use |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
79 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
80 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
81 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
82 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
83 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
84 |
Which mapper(s) you need, and if needed, how to create and edit the related mapping files |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
85 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
86 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
87 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
88 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
89 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
90 |
The root Certificate Authority files, and if required, the Certificate Revocation Lists files |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
91 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
92 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
93 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
94 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
95 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
96 |
The list of authorized users to login, and their corresponding certificates |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
97 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
98 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
99 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
100 |
To configure the \fBpam_pkcs11\fR module, you need to modify the \fBpam_pkcs11.conf\fR configuration file which is in the \fB/etc/security/pam_pkcs11\fR directory by default. For detailed information on how to configure the \fBpam_pkcs11\fR module, see the \fIPAM-PKCS11 User Manual\fR, available at the \fBhttp://www.opensc-project.org/\fR web site, under the \fBPAM PKCS#11\fR link. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
101 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
102 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
103 |
The following example illustrates how to configure the \fBpam_pkcs11\fR module for a user whose certificate and private key are stored in the Solaris \fBpkcs11_softtoken\fR keystore. This example uses the default certificate verification policy. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
104 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
105 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
106 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
107 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
108 |
Set up the PKCS#11 module. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
109 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
110 |
On Solaris, the PKCS#11 module should be set to \fB/usr/lib/libpkcs11.so.1\fR, the PKCS#11 Cryptographic Framework library. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
111 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
112 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
113 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
114 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
115 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
116 |
Set up the \fBslot_description\fR entry. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
117 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
118 |
Specifies the slot to be used. For example, \fBslot_description = "Sun Crypto Softtoken"\fR. The default value for this entry is \fBnone\fR which means to use the first slot with an available token. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
119 |
.sp |
5029
77413b29eb5a
22107485 More Userland component man page normalizations
Rich Burridge <rich.burridge@oracle.com>
parents:
2008
diff
changeset
|
120 |
An administrator can use the \fBcryptoadm list -v\fRcommand to find all the available slots and their slot descriptions. For more information, see \fBlibpkcs11\fR(3LIB) and \fBcryptoadm\fR(8). |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
121 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
122 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
123 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
124 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
125 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
126 |
Install or create user certificates and its dedicated private keys in the specific PKCS#11 token. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
127 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
128 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
129 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
130 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
131 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
132 |
Set up the certificate verification policy (\fBcert_policy\fR). If needed, set up CA certificate and CRL files. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
133 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
134 |
The certificate verification policy includes: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
135 |
.RS |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
136 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
137 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
138 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
139 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
140 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
141 |
\fB\fBnone\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
142 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
143 |
.RS 13n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
144 |
.rt |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
145 |
Perform no verification |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
146 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
147 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
148 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
149 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
150 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
151 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
152 |
\fB\fBca\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
153 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
154 |
.RS 13n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
155 |
.rt |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
156 |
Perform CA check |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
157 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
158 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
159 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
160 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
161 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
162 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
163 |
\fB\fBsignature\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
164 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
165 |
.RS 13n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
166 |
.rt |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
167 |
Perform a signature check to ensure that private and public key matches |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
168 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
169 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
170 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
171 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
172 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
173 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
174 |
\fB\fBcrl_\fR\fIxxx\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
175 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
176 |
.RS 13n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
177 |
.rt |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
178 |
Perform various certificate revocation checking |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
179 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
180 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
181 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
182 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
183 |
As this example uses the default policy, \fBcert_policy = ca,signature\fR, an administer needs to set up the CA certificates. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
184 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
185 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
186 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
187 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
188 |
Copy the CA certificate to the \fB/etc/security/pam_pkcs11/cacerts\fR directory. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
189 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
190 |
A certificate that is self-signed is its own CA certificate. Therefore, in this example, the certificate is placed both in the Softtoken keystore and in the CA certificate directory. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
191 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
192 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
193 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
194 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
195 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
196 |
Make hash links for CA certificates |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
197 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
198 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
199 |
.nf |
6432
e821c64a5943
PSARC/2016/427 PAM_PKCS11 0.6.8
Huie-Ying Lee <huieying.lee@oracle.com>
parents:
5029
diff
changeset
|
200 |
$ /etc/security/pam_pkcs11/pkcs11_make_hash_link \e |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
201 |
/etc/security/pam_pkcs11/cacerts |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
202 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
203 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
204 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
205 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
206 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
207 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
208 |
.RS +4 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
209 |
.TP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
210 |
.ie t \(bu |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
211 |
.el o |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
212 |
Set up the mappers and mapfiles. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
213 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
214 |
When a X509 certificate is provided, there are no direct ways to map a certificate to a login. The \fBpam_pkcs11\fR module provides a configurable way with mappers to specify \fBcert-to-user\fR mapping. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
215 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
216 |
Many mappers are provided by the \fBpam_pkcs11\fR module, for example, the common name (CN) mapper, the digest mapper, the Email mapper, or the LDAP mapper. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
217 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
218 |
A user can configure a mapper list in the \fBpam_pkcs11.conf\fR file. The mappers in the list are used sequentially until the certificate is successfully matched with the user. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
219 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
220 |
The default mapper list is as follows: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
221 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
222 |
.in +2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
223 |
.nf |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
224 |
use_mappers = digest, cn, pwent, uid, mail, subject, null; |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
225 |
.fi |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
226 |
.in -2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
227 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
228 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
229 |
Some mappers do not require the specification of a mapfile, for example, the common name mapper. Other mappers require mapfiles, for example, the digest mapper. Some sample mapping files can be found in the \fB/etc/security/pam_pkcs11\fR directory. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
230 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
231 |
.SH OPTIONS |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
232 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
233 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
234 |
The following options are supported: |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
235 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
236 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
237 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
238 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
239 |
\fB\fBconfig_file=\fIfilename\fR\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
240 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
241 |
.RS 24n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
242 |
.rt |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
243 |
Specify the configuration file. The default value is \fB/etc/security/pam_pkcs11/pam_pkcs11.conf\fR. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
244 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
245 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
246 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
247 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
248 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
249 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
250 |
\fB\fBdebug\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
251 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
252 |
.RS 24n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
253 |
.rt |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
254 |
Enable debugging output. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
255 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
256 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
257 |
.SH FILES |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
258 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
259 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
260 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
261 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
262 |
\fB\fB/usr/lib/security/pam_pkcs11.so\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
263 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
264 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
265 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
266 |
\fBpam_pkcs11\fR module |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
267 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
268 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
269 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
270 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
271 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
272 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
273 |
\fB\fB/usr/lib/pam_pkcs11/ldap_mapper.so\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
274 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
275 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
276 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
277 |
Mapper module. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
278 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
279 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
280 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
281 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
282 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
283 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
284 |
\fB\fB/usr/lib/pam_pkcs11/opensc_mapper.so\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
285 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
286 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
287 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
288 |
Mapper module. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
289 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
290 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
291 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
292 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
293 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
294 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
295 |
\fB\fB/usr/lib/pam_pkcs11/openssh_mapper.so\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
296 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
297 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
298 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
299 |
Mapper module. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
300 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
301 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
302 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
303 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
304 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
305 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
306 |
\fB\fB/etc/security/pam_pkcs11/pam_pkcs11.conf\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
307 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
308 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
309 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
310 |
Configuration file. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
311 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
312 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
313 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
314 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
315 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
316 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
317 |
\fB\fB/etc/security/pam_pkcs11/cacerts\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
318 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
319 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
320 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
321 |
Configuration directory. Stores the CA certificates. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
322 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
323 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
324 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
325 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
326 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
327 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
328 |
\fB\fB/etc/security/pam_pkcs11/crls\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
329 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
330 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
331 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
332 |
Configuration directory. Stores the CRL files. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
333 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
334 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
335 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
336 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
337 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
338 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
339 |
\fB\fB/etc/security/pam_pkcs11/digest_mapping.example\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
340 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
341 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
342 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
343 |
Sample mapfile. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
344 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
345 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
346 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
347 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
348 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
349 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
350 |
\fB\fB/etc/security/pam_pkcs11/subject_mapping.example\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
351 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
352 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
353 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
354 |
Sample mapfile. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
355 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
356 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
357 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
358 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
359 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
360 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
361 |
\fB\fB/etc/security/pam_pkcs11/mail_mapping.example\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
362 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
363 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
364 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
365 |
Sample mapfile. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
366 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
367 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
368 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
369 |
.ne 2 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
370 |
.mk |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
371 |
.na |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
372 |
\fB\fB/etc/security/pam_pkcs11/make_hash_link.sh\fR\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
373 |
.ad |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
374 |
.sp .6 |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
375 |
.RS 4n |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
376 |
Sample script. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
377 |
.RE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
378 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
379 |
.SH AUTHORS |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
380 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
381 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
382 |
\fBPAM-pkcs11\fR was originally written by MarioStrasser , \[email protected]\fR. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
383 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
384 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
385 |
Newer versions are from Juan Antonio Martinez, \[email protected]\fR |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
386 |
.SH ATTRIBUTES |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
387 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
388 |
.LP |
5029
77413b29eb5a
22107485 More Userland component man page normalizations
Rich Burridge <rich.burridge@oracle.com>
parents:
2008
diff
changeset
|
389 |
See \fBattributes\fR(7) for a description of the following attributes: |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
390 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
391 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
392 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
393 |
.TS |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
394 |
tab() box; |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
395 |
cw(2.75i) |cw(2.75i) |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
396 |
lw(2.75i) |lw(2.75i) |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
397 |
. |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
398 |
ATTRIBUTE TYPEATTRIBUTE VALUE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
399 |
_ |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
400 |
AvailabilityT{ |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
401 |
library/security/pam/module/pam-pkcs11, SUNWpampkcs11r, SUNWpampkcs11-docs |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
402 |
T} |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
403 |
_ |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
404 |
Interface StabilityUncommitted |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
405 |
.TE |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
406 |
|
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
407 |
.SH SEE ALSO |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
408 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
409 |
.LP |
6432
e821c64a5943
PSARC/2016/427 PAM_PKCS11 0.6.8
Huie-Ying Lee <huieying.lee@oracle.com>
parents:
5029
diff
changeset
|
410 |
\fBcard_eventmgr\fR(1), \fBpkcs11_inspect\fR(1), \fBpklogin_finder\fR(1), \fBcryptoadm\fR(8), \fBlibpkcs11\fR(3LIB)\fBlibpkcs11\fR(3LIB)\fBpam_sm_authenticate\fR(3PAM), \fBpam.conf\fR(5), \fBattributes\fR(7), \fBpkcs11_softtoken\fR(7) |
2008
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
411 |
.sp |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
412 |
.LP |
fbb3d4972042
18996594 tecla.5, teclarc.5, openssl.5 & pam_pkcs11.5 need to be added to Userland
John Beck <John.Beck@Oracle.COM>
parents:
diff
changeset
|
413 |
\fIPAM-PKCS11 User Manual\fR, available at the \fBhttp://www.opensc-project.org/\fR web site, under the \fBPAM PKCS#11\fR link. |