pklogin_finder(1)
π pklogin_finder(1) π
okay bestie, welcome to the PAM-PKCS#11 section of the manual, and today's main character is pklogin_finder β she maps certificates into a user and she does it flawlessly. β¨
πΈ NAME πΈ
pklogin_finder β maps certificates into a user π«Ά
β¨ SYNTAX β¨
pklogin_finder [debug] [config_file=<filename>]
that's it. that's the whole vibe check. π
π¦ DESCRIPTION π¦
so here's the tea: pklogin_finder uses the pam_pkcs11 library infrastructure to interactively map a PKCS#11 provided certificate to a user. like, it goes and figures out who you are, no cap. π
she uses the same configuration file and the same arguments as the pam_pkcs11(8) PAM module β not similar, the same. she loads the defined mapper modules and tries to find a map between the found certificates and a user login. it's giving matchmaker but for certs and logins. π
π OPTIONS π
debugβ turns on debugging output. Default is no debug. so if you want the receipts, you gotta ask for them. πconfig_file=<configuration file>β sets which configuration file to use. Default value is/etc/pam_pkcs11/pam_pkcs11.conf. ποΈ
because she runs off the same configuration file aspam_pkcs11, allpam_pkcs11options are also available to you. but heads up: some of them have absolutely no sense in a non-PAM environment, so they will just be ignored. they're not invited to the party, bestie. π«π
π§ RETURN VALUE π§
- on success,
pklogin_finderprints the login name on stdout and exits returning 0. slay. β - on user mapping error, she returns 1. π
- on no user match, she prints nothing and returns 2. the silence is loud fr fr. π
π FILES π
/etc/pam_pkcs11/pam_pkcs11.conf
β EXAMPLES β
to run this program the standard way, insert a smart card into the reader and type:
pklogin_finder
alternatively you can specify options:
pklogin_finder debug config_file=${HOME}/.pam_pkcs11.conf
iconic behavior honestly. πͺͺβ¨
π AUTHORS π
Juan Antonio Martinez <jonsito@teleline.es> β the legend herself. π
π₯ SEE ALSO π₯
pam_pkcs11(8)pkcs11_inspect(1)- PAM-PKCS11 User Manual
written by Juan Antonio Martinez, dating all the way back to Aug 2005 π°οΈ β yeah she's vintage, she's an OG, and she's still out here mapping certs to users with main character energy. go read the page, bestie, ily, bye! πππ¦πΈπ π«Ά
π¦ where this page comes from
- debian bookworm: libpam-pkcs11 0.6.12-1+deb12u1
- debian trixie: libpam-pkcs11 0.6.13-1
- opensuse-leap 16.0: pam_pkcs11 0.6.13-160000.2.2 Β· LGPL-2.1-or-later
- opensuse-leap 16.0: pam_pkcs11 0.6.13-160000.2.2 Β· LGPL-2.1-or-later
- opensuse-leap 16.0: pam_pkcs11 0.6.13-160000.2.2 Β· LGPL-2.1-or-later
- opensuse-leap 16.0: pam_pkcs11 0.6.13-160000.2.2 Β· LGPL-2.1-or-later
- ubuntu jammy: libpam-pkcs11 0.6.11-4build2
- ubuntu jammy: libpam-pkcs11 0.6.11-4ubuntu0.1
- ubuntu noble: libpam-pkcs11 0.6.12-2build3
- ubuntu noble: libpam-pkcs11 0.6.12-2ubuntu0.24.04.1
- ubuntu questing: libpam-pkcs11 0.6.13-1
- ubuntu resolute: libpam-pkcs11 0.6.13-1build1
- ubuntu stonking: libpam-pkcs11 0.6.13-2ubuntu1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms