pklogin_finder(1)

πŸ’– pklogin_finder(1) πŸ’–

okay bestie, welcome to the PAM-PKCS#11 section of the manual, and today's main character is pklogin_finder β€” she maps certificates into a user and she does it flawlessly. ✨


🌸 NAME 🌸

pklogin_finder β€” maps certificates into a user 🫢


✨ SYNTAX ✨

pklogin_finder [debug] [config_file=<filename>]

that's it. that's the whole vibe check. πŸ’…


πŸ¦‹ DESCRIPTION πŸ¦‹

so here's the tea: pklogin_finder uses the pam_pkcs11 library infrastructure to interactively map a PKCS#11 provided certificate to a user. like, it goes and figures out who you are, no cap. πŸ‘‘

she uses the same configuration file and the same arguments as the pam_pkcs11(8) PAM module β€” not similar, the same. she loads the defined mapper modules and tries to find a map between the found certificates and a user login. it's giving matchmaker but for certs and logins. πŸ’˜


πŸŽ€ OPTIONS πŸŽ€

  • debug β€” turns on debugging output. Default is no debug. so if you want the receipts, you gotta ask for them. πŸ”
  • config_file=<configuration file> β€” sets which configuration file to use. Default value is /etc/pam_pkcs11/pam_pkcs11.conf. πŸ—‚οΈ
because she runs off the same configuration file as pam_pkcs11, all pam_pkcs11 options are also available to you. but heads up: some of them have absolutely no sense in a non-PAM environment, so they will just be ignored. they're not invited to the party, bestie. πŸš«πŸŽ‰

🧚 RETURN VALUE 🧚

  • on success, pklogin_finder prints the login name on stdout and exits returning 0. slay. βœ…
  • on user mapping error, she returns 1. 😭
  • on no user match, she prints nothing and returns 2. the silence is loud fr fr. πŸ’€

🌈 FILES 🌈

  • /etc/pam_pkcs11/pam_pkcs11.conf

⭐ EXAMPLES ⭐

to run this program the standard way, insert a smart card into the reader and type:

pklogin_finder

alternatively you can specify options:

pklogin_finder debug config_file=${HOME}/.pam_pkcs11.conf

iconic behavior honestly. πŸͺͺ✨


πŸ‘‘ AUTHORS πŸ‘‘

Juan Antonio Martinez <jonsito@teleline.es> β€” the legend herself. πŸ’œ


πŸ”₯ SEE ALSO πŸ”₯


written by Juan Antonio Martinez, dating all the way back to Aug 2005 πŸ•°οΈ β€” yeah she's vintage, she's an OG, and she's still out here mapping certs to users with main character energy. go read the page, bestie, ily, bye! πŸ’–πŸŽ€πŸ¦‹πŸŒΈπŸ’…πŸ«Ά