Package: libpam-pkcs11 Version: 0.5.3-1 Severity: wishlist * Package name : libpam-pkcs11 Version : 0.5.3 Upstream Author : Mario Strasser <[EMAIL PROTECTED]> Juan Antonio Martinez <[EMAIL PROTECTED]> Antti Tapaninen <[EMAIL PROTECTED]> Timo Sirainen <[EMAIL PROTECTED]> Ludovic Rousseau <[EMAIL PROTECTED]> Andreas Jellinghaus <[EMAIL PROTECTED]> Dominik Fischer <[EMAIL PROTECTED]> Ville Skyttä <[EMAIL PROTECTED]> * URL or Web page : http://www.opensc-project.org * License : GPL Description : Fully featured PAM module for using for using PKCS#11 smart cards A Pluggable Authentication Module for PKCS#11 based smart cards. Useful for enabling smart card based user login to a system.
More advanced than libpam-p11. Additional features include full verification of the card data using certificate chains and certificate revocation lists. Advanced username mapping including LDAP, Active Directory and Kerberos. This package is a much more advanced system for authenticating users via pkcs#11 smart cards than libpam-p11. I am not entirely sure how to package it since it has dev files, but I am not sure if they would ever be used. Anyway, here is the contents of the libpam-pkcs11 package I have built: - libpam-pkcs11 /usr/bin/pkcs11_eventmgr /usr/bin/pklogin_finder /usr/bin/pkcs11_inspect /lib/pam_pkcs11/ldap_mapper.so /lib/pam_pkcs11/ldap_mapper.la /lib/pam_pkcs11/ldap_mapper.a /lib/pam_pkcs11/opensc_mapper.so /lib/pam_pkcs11/opensc_mapper.la /lib/pam_pkcs11/opensc_mapper.a /lib/pam_pkcs11/openssh_mapper.so /lib/pam_pkcs11/openssh_mapper.la /lib/pam_pkcs11/openssh_mapper.a /lib/security/pam_pkcs11.so It is a pretty straight forward pam package. I have a bunch of config examples for it too. It works great. Thanks, Joshua Rubin -- System Information: Debian Release: 4.0 APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.19-rub3 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages libpam-pkcs11 depends on: ii libc6 2.3.6.ds1-10 GNU C Library: Shared libraries ii libcomer 1.39+1.40-WIP-2006.11.14+dfsg-1 common error description library ii libcurl3 7.15.5-1 Multi-protocol file transfer libra ii libidn11 0.6.5-1 GNU libidn library, implementation ii libkrb53 1.4.4-6 MIT Kerberos runtime libraries ii libldap2 2.1.30-13.2 OpenLDAP libraries ii libpam0g 0.79-4 Pluggable Authentication Modules l ii libpcscl 1.3.2-5 Middleware to access a smart card ii libssl0. 0.9.8c-4 SSL shared libraries ii zlib1g 1:1.2.3-13 compression library - runtime libpam-pkcs11 recommends no packages. -- no debconf information