Attachment 17827 Details for Bug 53165 – pam_pkcs11_jacarta - conf

pam_pkcs11_jacarta - conf

pam_pkcs11_jacarta.conf (text/plain), 2.19 KB, created by makhotinvs@mosreg.tru on 2025-02-27 11:31:23 MSK

(hide)

Description:

Filename:

MIME Type:

Creator: makhotinvs@mosreg.tru

Created: 2025-02-27 11:31:23 MSK

Size: 2.19 KB

patch

obsolete

>
>pam_pkcs11 { nullok = true;
>             debug = false;
>            # use_first_pass = false;
>            # try_first_pass = false;
>             use_authtok = true;
>             use_pkcs11_module = jacarta;
>
>	     #JaCarta
>	     pkcs11_module jacarta {
>             module = /usr/lib64/libjcPKCS11-2.so;
>             description = "ARDS JaCarta pkcs#11 module";
>             slot_num = 0;
>             ca_dir = /etc/security/pam_pkcs11/cacerts;
>             crl_dir = /etc/security/pam_pkcs11/crls; 
>             crl_policy = none;
>             }
>
>             use_mappers = subject, ads, ms, null;
>             mapper_search_path = /lib64/pam_pkcs11;
>             
>             mapper subject {
>               debug = false;  
>               # module = /usr/lib/pam_pkcs11/subject_mapper.so;
>               module = internal;
>               ignorecase = false;
>               mapfile = file:///etc/security/pam_pkcs11/subject_mapping;
>               }
>             mapper null {
>               debug = false;
>               module = internal ;
> }
>mapper ads {
>  debug = false;
>  module = /lib64/pam_pkcs11/ldap_mapper.so; 
>  # where base directory resides
>  basedir = /etc/security/pam_pkcs11/mapdir;
>  # ÐÐ´ÐµÑÑ ÑÐºÐ°Ð·ÑÐ²Ð°ÐµÐ¼ Ð°Ð´ÑÐµÑ Ð½Ð°ÑÐµÐ³Ð¾ ÐºÐ¾Ð½ÑÑÐ¾Ð»Ð»ÐµÑÐ° Ð´Ð¾Ð¼ÐµÐ½Ð°
>  ldaphost = "DC-01.d.m.ru";
>  # Port on ldap server to connect
>  ldapport = 389; 
>  # Scope of search: 0 = x, 1 = y, 2 = z scope = 0;
>  scope=2;
>  # Ð£ÐºÐ°Ð·ÑÐ²Ð°ÐµÐ¼ DN-Ð¸Ð¼Ñ Ð¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÐµÐ»Ñ, ÐºÐ¾ÑÐ¾ÑÑÐ¹ Ð¸Ð¼ÐµÐµÑ Ð¿ÑÐ°Ð²Ð¾ Ð½Ð° ÑÑÐµÐ½Ð¸Ðµ ÐºÐ°ÑÐ°Ð»Ð¾Ð³Ð°
>  binddn = "CN=ÐÐ¿ÑÐ¾Ñ Ð»Ð´Ð°Ð¿,OU=Service,OU=ÐÐÐ£,OU=Ð,OU=ÐÐ¾DC=d,DC=mo,DC=r" passwd = 2J4
>  # Searchbase for user entries
>  base = "OU=ÐÐÐ£Ð ÐÐ Ð¡ÑÑ,OU=ÐÐµ,OU=ÐÐ¾Ð´Ð²ÐµÐ¸,DC=d,DC=m,DC=ru";
>  # Attribute of user entry which contains the certificate
>  attribute = "userCertificate:";
>  # Searchfilter for user entry. Must only let pass user entry for the login user.
>  #filter = "(&(cn=%s) (objectClass=inetOrgPerson))";
>  filter = "(&(objectClass=posixAccount)(uid=%s))"
>  #filter = "(msSFU30Name=%s)";
>  uid-attribute = "uid";
>  }
>
>mapper ms {
>  debug = false;
>  module = internal;
>  ignorecase = true;
>  ignoredomain = true;
>  domain = "p.mo.ru"; }
>}

Actions: View

Attachments on bug 53165: 17826 | 17827 | 17828 | 17829 | 17830 | 17831