This software provides open source PAM authentication and verification for smart cards.
Pam PKCS#11 is an exceptional Pam authentication module that permits login via smart cards and ensures full validation of the card data. This software utilizes certificate chains, certificate revocation lists, LDAP, Active Directory, Kerberos to ensure the security of the login system.
One of the significant features of this software is that it uses the concept of mapper to enable the ownership of a certificate to correlate with a user login. The mapper is a configurable and stackable list of dynamic modules, each one designed to aid specific cert-to-login mapping. The software has several mappers provided, including the common name of the subject matching the login name, the unique identifier of the subject matching the login name, the user part of an e-mail subject alternative name extension matching the login name, and the Microsoft universal principal name extension matching the login name.
Moreover, Pam PKCS#11 has many mappers that can use a mapfile to translate Certificate contents to a login name. This software is licensed and provided under the terms of the GNU Lesser General Public License. It is important to note that this software needs OpenSSL to function properly.
In summary, Pam PKCS#11 is an excellent software with robust and efficient functionalities, making authentication via smart cards secure and effortless.
One of the significant features of this software is that it uses the concept of mapper to enable the ownership of a certificate to correlate with a user login. The mapper is a configurable and stackable list of dynamic modules, each one designed to aid specific cert-to-login mapping. The software has several mappers provided, including the common name of the subject matching the login name, the unique identifier of the subject matching the login name, the user part of an e-mail subject alternative name extension matching the login name, and the Microsoft universal principal name extension matching the login name.
Moreover, Pam PKCS#11 has many mappers that can use a mapfile to translate Certificate contents to a login name. This software is licensed and provided under the terms of the GNU Lesser General Public License. It is important to note that this software needs OpenSSL to function properly.
In summary, Pam PKCS#11 is an excellent software with robust and efficient functionalities, making authentication via smart cards secure and effortless.
What's New
Version 0.6.0: N/A