pam_pkcs11-0.6.10-alt6.i586.rpm


Advertisement

Description

pam_pkcs11 - PKCS #11 PAM Module and Login Tools

Property Value
Distribution ALT Linux Sisyphus
Repository Classic i586
Package filename pam_pkcs11-0.6.10-alt6.i586.rpm
Package name pam_pkcs11
Package version 0.6.10
Package release alt6
Package architecture i586
Package type rpm
Category System/Base
Homepage -
License -
Maintainer -
Download size 1009.16 KB
Installed size 1009.16 KB
This Linux-PAM login module allows a X.509 certificate based user login.
The certificate and its dedicated private key are thereby accessed by
means of an appropriate PKCS #11 module. For the verification of the
user certificates, locally stored CA certificates as well as either
online or locally accessible CRLs are used.
Adittional included pam_pkcs11 related tools:
- pkcs11_eventmgr: Generate actions on card insert/removal/timeout
events
- pklogin_finder: Get the loginname that maps to a certificate
- pkcs11_inspect: Inspect the contents of a certificate

Alternatives

Package Version Architecture Repository
pam_pkcs11-0.6.10-alt6.x86_64.rpm 0.6.10 x86_64 Classic
pam_pkcs11 - - -

Requires

Name Value
/bin/bash -
/lib/ld-linux.so.2 -
PAM(pam_mkhomedir.so) -
PAM(pam_succeed_if.so) -
coreutils -
gawk -
libc.so.6(GLIBC_2.0) -
libc.so.6(GLIBC_2.1) -
libc.so.6(GLIBC_2.1.3) -
libc.so.6(GLIBC_2.3) -
libc.so.6(GLIBC_2.3.4) -
libc.so.6(GLIBC_2.4) -
libc.so.6(GLIBC_2.7) -
libcrypto.so.1.1 -
libcrypto.so.1.1(OPENSSL_1_1_0) -
libdl.so.2(GLIBC_2.0) -
libdl.so.2(GLIBC_2.1) -
libpam.so.0 -
libpam.so.0(LIBPAM_1.0) -
libpam.so.0(LIBPAM_EXTENSION_1.0) -
libpthread.so.0(GLIBC_2.0) -
libpwquality.so.1 -
libpwquality.so.1(LIBPWQUALITY_1.0) -
pam-config -
pcsc-lite -
pcsc-lite-ccid -
rpmlib(PayloadIsLzma) -
rpmlib(SetVersions) -
rtld(GNU_HASH) -

Provides

Name Value
PAM(pam_pkcs11.so) -
pam0(system-auth-pkcs11_strict) -
pam0(system-auth-use_first_pass-pkcs11_strict) -
pam_pkcs11 = 0.6.10-alt6:sisyphus+224860.100.1.1

Download

Type URL
Mirror ftp.altlinux.org
Binary Package pam_pkcs11-0.6.10-alt6.i586.rpm
Source Package pam_pkcs11-0.6.10-alt6.src.rpm

Install Howto

  1. Add the following line to /etc/apt/sources.list:
    
    rpm [Sisyphus] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus i586 classic
    rpm [Sisyphus] http://ftp.altlinux.org/pub/distributions/ALTLinux/Sisyphus noarch classic
    
  2. Update the package index:
    # sudo apt-get update
  3. Install pam_pkcs11 rpm package:
    # sudo apt-get install pam_pkcs11

Files

Path
/etc/pam.d/system-auth-pkcs11_strict
/etc/pam.d/system-auth-use_first_pass-pkcs11_strict
/etc/security/pam_pkcs11/cacerts
/etc/security/pam_pkcs11/crls
/etc/security/pam_pkcs11/digest_mapping
/etc/security/pam_pkcs11/mail_mapping
/etc/security/pam_pkcs11/pam_pkcs11.conf
/etc/security/pam_pkcs11/pkcs11_eventmgr.conf
/etc/security/pam_pkcs11/subject_mapping
/lib/pam_pkcs11/opensc_mapper.so
/lib/pam_pkcs11/openssh_mapper.so
/lib/security/pam_pkcs11.so
/lib/systemd/system/pkcs11-eventmgr.service
/usr/bin/pam_pkcs11_query_config
/usr/bin/pkcs11_eventmgr
/usr/bin/pkcs11_inspect
/usr/bin/pkcs11_listcerts
/usr/bin/pkcs11_make_hash_link
/usr/bin/pkcs11_setup
/usr/bin/pklogin_finder
/usr/share/doc/pam_pkcs11-0.6.10/AUTHORS
/usr/share/doc/pam_pkcs11-0.6.10/README
/usr/share/doc/pam_pkcs11-0.6.10/README.autologin
/usr/share/doc/pam_pkcs11-0.6.10/README.mappers
/usr/share/doc/pam_pkcs11-0.6.10/mappers_api.html
/usr/share/doc/pam_pkcs11-0.6.10/pam.d_login.example
/usr/share/doc/pam_pkcs11-0.6.10/pam_pkcs11.html
/usr/share/locale/de/LC_MESSAGES/pam_pkcs11.mo
/usr/share/locale/fr/LC_MESSAGES/pam_pkcs11.mo
/usr/share/locale/it/LC_MESSAGES/pam_pkcs11.mo
/usr/share/locale/nl/LC_MESSAGES/pam_pkcs11.mo
/usr/share/locale/pl/LC_MESSAGES/pam_pkcs11.mo
/usr/share/locale/pt_BR/LC_MESSAGES/pam_pkcs11.mo
/usr/share/locale/ru/LC_MESSAGES/pam_pkcs11.mo
/usr/share/locale/tr/LC_MESSAGES/pam_pkcs11.mo
/usr/share/man/man1/pkcs11_eventmgr.1.xz
/usr/share/man/man1/pkcs11_inspect.1.xz
/usr/share/man/man1/pkcs11_listcerts.1.xz
/usr/share/man/man1/pkcs11_make_hash_link.1.xz
/usr/share/man/man1/pkcs11_setup.1.xz
/usr/share/man/man1/pklogin_finder.1.xz
/usr/share/man/man8/pam_pkcs11.8.xz

Changelog

2019-03-12 - Oleg Solovyov <mcpain@altlinux.org> 0.6.10-alt6
- rebuild with openssl 1.1
2019-01-11 - Paul Wolneykien <manowar@altlinux.org> 0.6.10-alt5
- Fix/improve: Write a message when the token authentication is
cancelled.
2018-11-28 - Paul Wolneykien <manowar@altlinux.org> 0.6.10-alt4
- Fix: Put the examples into the package docdir.
- Install the default mapping configs.
2018-11-20 - Paul Wolneykien <manowar@altlinux.org> 0.6.10-alt3
- Improve: Add option "use_waitevent" utilizing C_WaitForSlotEvent().
- Introduce the "pin_len_min" and "pin_len_max" configuration
options that control the allowed PIN-code length.
2018-11-19 - Paul Wolneykien <manowar@altlinux.org> 0.6.10-alt2
- Fix: Don\'t force PIN change from the screensaver session.
- State the token label and serial in the syslog messages.
- Round the "PIN changed" event timestamp and the system time prior
to compare them.
- Fix/improve: Take a journal record with the minimal index when
looking for the last event of particular type.
2018-09-13 - Paul Wolneykien <manowar@altlinux.org> 0.6.10-alt1
- New version 0.6.10.
- Cleanup passwords with `cleanse()` in the new code too.
- README.md: removed license section (thx Frank Morgner).
- Update README.md (thx Frank Morgner).
- fixed wiping secrets with OpenSSL_cleanse() (thx Frank Morgner).
- fixed buffer overflow with long home directory (thx Frank Morgner).
- verify using a nonce from the system, not the card (thx Frank Morgner).
- Fixed segfault and fetch problems when checking CRLs (thx Gil Kloepfer).
2018-08-13 - Paul Wolneykien <manowar@altlinux.org> 0.6.9-alt34
- Distinguish between entering a wrong user PIN and SO PIN during
the PIN change / initialization procedure.
2018-08-06 - Paul Wolneykien <manowar@altlinux.org> 0.6.9-alt33
- Fixed: Distinguish between expired PIN and other cases to change it.
2018-06-15 - Paul Wolneykien <manowar@altlinux.org> 0.6.9-alt32
- Build with a new LibreSSL version (2.7.3).
2018-06-07 - Paul Wolneykien <manowar@altlinux.org> 0.6.9-alt31
- Fixed SIGSEGV on empty password.
- Simplify the password cleanup in the PIN change procedure.
- Implement the "check_pin_early" option.

See Also

Package Description
pam_pkcs11-isbc-0.6.10-alt6.i586.rpm ISBC (ESMART) low-level modules for pam_pkcs11
pam_pkcs11-ldap-0.6.10-alt6.i586.rpm LDAP Cert-to-Login mapper for pam_pkcs11
pam_pkcs11-pcsc-0.6.10-alt6.i586.rpm PCSC-Lite extra tools for pam_pkcs11
pam_script-1.1.8-alt1.i586.rpm This PAM module can invoke scripts within the PAM stack
pam_systemd-243-alt3.i586.rpm Register user sessions in the systemd login manager
pam_userpass-devel-1.0.2-alt6.i586.rpm Library and header files for developing pam_userpass-aware applications
pam_userpass-devel-static-1.0.2-alt6.i586.rpm Development static pam_userpass library
paman-0.9.4-alt4.qa3.i586.rpm PulseAudio Manager
pamtester-0.1.12-alt1.qa2.i586.rpm Utility for testing pluggable authentication modules (PAM) facility
pan-0.145-alt1_2.i586.rpm A Usenet newsreader for GNOME/GTK+
pandoc-1.11.1-alt2.i586.rpm Markup conversion tool for markdown
panini-0.71.104-alt2.1.i586.rpm Panini perspective tool
pantheon-files-4.2.0-alt1.i586.rpm The file manager of the Pantheon desktop
pantheon-files-devel-4.2.0-alt1.i586.rpm Development files for pantheon-files
pantheon-terminal-5.3.6-alt1.i586.rpm Pantheon Terminal
Advertisement
Advertisement