Package pam_pkcs11: Information

Source package: pam_pkcs11
Version: 0.6.9-alt14
Build time:  Aug 24, 2017, 08:52 PM in the task #187452
Copied in the task: #186892
Category: System/Base
Report package bug
License: LGPL
Summary: PKCS #11 PAM Module and Login Tools
Description: 
This Linux-PAM login module allows a X.509 certificate based user login.
The certificate and its dedicated private key are thereby accessed by
means of an appropriate PKCS #11 module. For the verification of the
user certificates, locally stored CA certificates as well as either
online or locally accessible CRLs are used.

Adittional included pam_pkcs11 related tools:

 - pkcs11_eventmgr: Generate actions on card insert/removal/timeout
   events
 - pklogin_finder: Get the loginname that maps to a certificate
 - pkcs11_inspect: Inspect the contents of a certificate

List of rpms provided by this srpm:
pam_pkcs11 (x86_64, i586)
pam_pkcs11-debuginfo (x86_64, i586)
pam_pkcs11-ldap (x86_64, i586)
pam_pkcs11-ldap-debuginfo (x86_64, i586)
pam_pkcs11-pcsc (x86_64, i586)
pam_pkcs11-pcsc-debuginfo (x86_64, i586)

Maintainer: Paul Wolneykien


    1. libldap-devel
    2. libssl-devel
    3. docbook-dtds
    4. docbook-style-xsl
    5. doxygen
    6. libpam-devel
    7. flex
    8. libpcsclite-devel >= 1.7.4
    9. gcc-c++
    10. xsltproc

Last changed


Aug. 24, 2017 Paul Wolneykien 0.6.9-alt14
- Fix/improve: Return PAM_IGNORE if the token isn\'t present and
  card_only isn\'t set.
- Fix: Return PAM_IGNORE on PIN change request if the current login
  is not related to a token.
Aug. 24, 2017 Paul Wolneykien 0.6.9-alt13
- Add password (PIN) management steps to the PAM stack.
- Implement "pam_sm_chauthtok" (the "password" part of PAM).
Aug. 14, 2017 Paul Wolneykien 0.6.9-alt12
- Explicitly require pcsc-lite (for pcscd).
- Also require pcsc-lite-ccid (as related to the default OpenSC
  profile).