Attachment 17828 Details for Bug 53165 – pam_pkcs11_rutoken

pam_pkcs11_rutoken

pam_pkcs11_rutoken.conf (text/plain), 2.13 KB, created by makhotinvs@mosreg.tru on 2025-02-27 11:33:23 MSK

(hide)

Description:

Filename:

MIME Type:

Creator: makhotinvs@mosreg.tru

Created: 2025-02-27 11:33:23 MSK

Size: 2.13 KB

patch

obsolete

>
>pam_pkcs11 { nullok = true;
>             debug = false;
>            # use_first_pass = false;
>            # try_first_pass = false;
>             use_authtok = true;
>             use_pkcs11_module = rutokenecp;
>
>             #Aktiv Rutoken ECP
>             pkcs11_module rutokenecp {
>             module = /usr/lib64/librtpkcs11ecp.so;
>             slot_num = 0;
>             ca_dir = /etc/security/pam_pkcs11/cacerts;
>             crl_dir = /etc/psecurity/pam_pkcs11/crls;
>             crl_policy = none;
>             }
>
>             use_mappers = subject, ads, ms, null;
>             mapper_search_path = /lib64/pam_pkcs11;
>
>             mapper subject {
>               debug = false;
>               # module = /usr/lib/pam_pkcs11/subject_mapper.so;
>               module = internal;
>               ignorecase = false;
>               mapfile = file:///etc/security/pam_pkcs11/subject_mapping;
>               }
>             mapper null {
>               debug = false;
>               module = internal ;
> }
>  
>  mapper ads {
>  debug = false;
>  module = /lib64/pam_pkcs11/ldap_mapper.so; 
>  # where base directory resides
>  basedir = /etc/security/pam_pkcs11/mapdir;
>  # ÐÐ´ÐµÑÑ ÑÐºÐ°Ð·ÑÐ²Ð°ÐµÐ¼ Ð°Ð´ÑÐµÑ Ð½Ð°ÑÐµÐ³Ð¾ ÐºÐ¾Ð½ÑÑÐ¾Ð»Ð»ÐµÑÐ° Ð´Ð¾Ð¼ÐµÐ½Ð°
>  ldaphost = "C-01.d.m.ru";
>  # Port on ldap server to connect
>  ldapport = 389; 
>  # Scope of search: 0 = x, 1 = y, 2 = z scope = 0;
>  scope=2;
>  # Ð£ÐºÐ°Ð·ÑÐ²Ð°ÐµÐ¼ DN-Ð¸Ð¼Ñ Ð¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°ÑÐµÐ»Ñ, ÐºÐ¾ÑÐ¾ÑÑÐ¹ Ð¸Ð¼ÐµÐµÑ Ð¿ÑÐ°Ð²Ð¾ Ð½Ð° ÑÑÐµÐ½Ð¸Ðµ ÐºÐ°ÑÐ°Ð»Ð¾Ð³Ð°
>  binddn = "CN=ÐÐ¿ÑÐ¿,OU=Se,OU=ÐÐÐ°,OU=ÐÐµÐ´Ð£,OU=ÐÐ¾Ð´Ð¸,DC=p,DC=mo,DC=u" passwd = 2J
>  # Searchbase for user entries
>  base = "OU=ÐÐÐ£,OU=Ð,OU=ÐÐ¾Ð´,DC=d,DC=m,DC=r";
>  # Attribute of user entry which contains the certificate
>  attribute = "userCertificate:";
>  # Searchfilter for user entry. Must only let pass user entry for the login user.
>  #filter = "(&(cn=%s) (objectClass=inetOrgPerson))";
>  filter = "(&(objectClass=posixAccount)(uid=%s))"
>  #filter = "(msSFU30Name=%s)";
>  uid-attribute = "uid";
>  }
>
>  mapper ms {
>  debug = false;
>  module = internal;
>  ignorecase = true;
>  ignoredomain = true;
>  domain = "d.m.ru"; }
>  }

Actions: View

Attachments on bug 53165: 17826 | 17827 | 17828 | 17829 | 17830 | 17831