Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   20652 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

pam_smartcard(5)      Standards, Environments, and Macros     pam_smartcard(5)

NAME
       pam_smartcard - PAM authentication module for Smart Card

SYNOPSIS
       /usr/lib/security/pam_smartcard.so

DESCRIPTION
       The  Smart  Card	 service  module for PAM, /usr/lib/security/pam_smart‐
       card.so, provides functionality to obtain a user's information (such as
       user  name  and password) for a smart card. The pam_smartcard.so module
       is a shared object that can be dynamically loaded to provide the neces‐
       sary  functionality  upon demand. Its path is specified in the PAM con‐
       figuration file pam.conf. See pam.conf(4).

   Smart Card Authentication Module
       The Smart Card authentication component provides	 the  pam_sm_authenti‐
       cate(3PAM) function to verify the identity of a smart card user.

       The  pam_sm_authenticate() function collects as user input the PIN num‐
       ber. It passes this data back to its underlying layer, OCF, to  perform
       PIN  verification.  If  verification  is successful, the module returns
       PAM_SUCCESS, and passes the username and password from the  smart  card
       to PAM modules stacked below.pam_smartcard.

       The following options can be passed to the Smart Card service module:

       debug	       syslog(3C) debugging information at LOG_DEBUG level.

       nowarn	       Turn off warning messages.

       verbose	       Turn on verbose authentication failure reporting to the
		       user.

   Smart Card Module Configuration
       The PAM smart card module (pam_smartcard) can be configured in the  PAM
       configuration file (/etc/pam.conf).  For example, the following config‐
       uration on on the desktop (Common Desktop Environment) forces a user to
       use a smart card for logging in.

       The  following  are typical values set by 'smartcard -c enable', if the
       command is applied to the default configuration.

       dtlogin	       auth requisite	       pam_smartcard.so.1
       dtlogin	       auth required	       pam_authtok_get.so.1
       dtlogin	       auth required	       pam_dhkeys.so.1

       dtsession       auth requisite	       pam_smartcard.so.1
       dtsession       auth required	       pam_authtok_get.so.1
       dtsession       auth required	       pam_dhkeys.so.1

SEE ALSO
       smartcard(1M),	libpam(3LIB),	 pam(3PAM),    pam_authenticate(3PAM),
       pam_start(3PAM), pam.conf(4), pam_authtok_check(5), pam_authtok_get(5),
       pam_authtok_store(5),	    pam_dhkeys(5),	   pam_passwd_auth(5),
       pam_unix_account(5), pam_unix_auth(5), pam_unix_session(5)

NOTES
       The pam_unix(5) module is no longer supported. Similar functionality is
       provided	  by   pam_authtok_check(5),   pam_authtok_get(5),   pam_auth‐
       tok_store(5),  pam_dhkeys(5),  pam_passwd_auth(5), pam_unix_account(5),
       pam_unix_auth(5), and pam_unix_session(5).

SunOS 5.10			  24 Oct 2002		      pam_smartcard(5)

Vote for polarhome