pam_pkcs11 - PKCS #11 PAM Module and Login Tools

Property Value
Distribution ALT Linux Sisyphus
Repository Classic i586
Package filename pam_pkcs11-0.6.10-alt6.i586.rpm
Package name pam_pkcs11
Package version 0.6.10
Package release alt6
Package architecture i586
Package type rpm
Category System/Base
Homepage -
License -
Maintainer -
Download size 1009.16 KB
Installed size 1009.16 KB
This Linux-PAM login module allows a X.509 certificate based user login.
The certificate and its dedicated private key are thereby accessed by
means of an appropriate PKCS #11 module. For the verification of the
user certificates, locally stored CA certificates as well as either
online or locally accessible CRLs are used.
Adittional included pam_pkcs11 related tools:
- pkcs11_eventmgr: Generate actions on card insert/removal/timeout
- pklogin_finder: Get the loginname that maps to a certificate
- pkcs11_inspect: Inspect the contents of a certificate


Package Version Architecture Repository
pam_pkcs11-0.6.10-alt6.x86_64.rpm 0.6.10 x86_64 Classic
pam_pkcs11 - - -


Name Value
/bin/bash -
/lib/ -
PAM( -
PAM( -
coreutils -
gawk - - - - - - - - - - - - - - - - - -
pam-config -
pcsc-lite -
pcsc-lite-ccid -
rpmlib(PayloadIsLzma) -
rpmlib(SetVersions) -
rtld(GNU_HASH) -


Name Value
PAM( -
pam0(system-auth-pkcs11_strict) -
pam0(system-auth-use_first_pass-pkcs11_strict) -
pam_pkcs11 = 0.6.10-alt6:sisyphus+224860.100.1.1


Type URL
Binary Package pam_pkcs11-0.6.10-alt6.i586.rpm
Source Package pam_pkcs11-0.6.10-alt6.src.rpm

Install Howto

  1. Add the following line to /etc/apt/sources.list:
    rpm [Sisyphus] i586 classic
    rpm [Sisyphus] noarch classic
  2. Update the package index:
    # sudo apt-get update
  3. Install pam_pkcs11 rpm package:
    # sudo apt-get install pam_pkcs11




2019-03-12 - Oleg Solovyov <> 0.6.10-alt6
- rebuild with openssl 1.1
2019-01-11 - Paul Wolneykien <> 0.6.10-alt5
- Fix/improve: Write a message when the token authentication is
2018-11-28 - Paul Wolneykien <> 0.6.10-alt4
- Fix: Put the examples into the package docdir.
- Install the default mapping configs.
2018-11-20 - Paul Wolneykien <> 0.6.10-alt3
- Improve: Add option "use_waitevent" utilizing C_WaitForSlotEvent().
- Introduce the "pin_len_min" and "pin_len_max" configuration
options that control the allowed PIN-code length.
2018-11-19 - Paul Wolneykien <> 0.6.10-alt2
- Fix: Don\'t force PIN change from the screensaver session.
- State the token label and serial in the syslog messages.
- Round the "PIN changed" event timestamp and the system time prior
to compare them.
- Fix/improve: Take a journal record with the minimal index when
looking for the last event of particular type.
2018-09-13 - Paul Wolneykien <> 0.6.10-alt1
- New version 0.6.10.
- Cleanup passwords with `cleanse()` in the new code too.
- removed license section (thx Frank Morgner).
- Update (thx Frank Morgner).
- fixed wiping secrets with OpenSSL_cleanse() (thx Frank Morgner).
- fixed buffer overflow with long home directory (thx Frank Morgner).
- verify using a nonce from the system, not the card (thx Frank Morgner).
- Fixed segfault and fetch problems when checking CRLs (thx Gil Kloepfer).
2018-08-13 - Paul Wolneykien <> 0.6.9-alt34
- Distinguish between entering a wrong user PIN and SO PIN during
the PIN change / initialization procedure.
2018-08-06 - Paul Wolneykien <> 0.6.9-alt33
- Fixed: Distinguish between expired PIN and other cases to change it.
2018-06-15 - Paul Wolneykien <> 0.6.9-alt32
- Build with a new LibreSSL version (2.7.3).
2018-06-07 - Paul Wolneykien <> 0.6.9-alt31
- Fixed SIGSEGV on empty password.
- Simplify the password cleanup in the PIN change procedure.
- Implement the "check_pin_early" option.

See Also

Package Description
pam_pkcs11-isbc-0.6.10-alt6.i586.rpm ISBC (ESMART) low-level modules for pam_pkcs11
pam_pkcs11-ldap-0.6.10-alt6.i586.rpm LDAP Cert-to-Login mapper for pam_pkcs11
pam_pkcs11-pcsc-0.6.10-alt6.i586.rpm PCSC-Lite extra tools for pam_pkcs11
pam_script-1.1.8-alt1.i586.rpm This PAM module can invoke scripts within the PAM stack
pam_systemd-243-alt3.i586.rpm Register user sessions in the systemd login manager
pam_userpass-devel-1.0.2-alt6.i586.rpm Library and header files for developing pam_userpass-aware applications
pam_userpass-devel-static-1.0.2-alt6.i586.rpm Development static pam_userpass library
paman-0.9.4-alt4.qa3.i586.rpm PulseAudio Manager
pamtester-0.1.12-alt1.qa2.i586.rpm Utility for testing pluggable authentication modules (PAM) facility
pan-0.145-alt1_2.i586.rpm A Usenet newsreader for GNOME/GTK+
pandoc-1.11.1-alt2.i586.rpm Markup conversion tool for markdown
panini-0.71.104-alt2.1.i586.rpm Panini perspective tool
pantheon-files-4.2.0-alt1.i586.rpm The file manager of the Pantheon desktop
pantheon-files-devel-4.2.0-alt1.i586.rpm Development files for pantheon-files
pantheon-terminal-5.3.6-alt1.i586.rpm Pantheon Terminal