---
name: "login_token"
section: "8"
platform: "openbsd"
package: "man"
version: "8.0-current-20261101"
release: "OpenBSD 8.0-current (2026-11-01)"
platforms: ["openbsd"]
url: "https://new.carta.tech/login_token"
---

# login\_token(8)

provide ActivCard, CRYPTOCard and SNK-004 authentication

## NAME

**login\_activ**, **login\_crypto**, **login\_snk** – provide ActivCard, CRYPTOCard and SNK-004 authentication

## SYNOPSIS

**login\_token** \[**-s** *service*\] \[**-v** *name*=*value*\] *user* \[*class*\]

## DESCRIPTION

The **login\_token** program implements an X9.9 token card challenge response authentication mechanism (see [login.conf(5)](/login.conf/5.md)). It must be invoked by one of the names: **login\_activ**, **login\_crypto**, or **login\_snk**.

The options are as follows:

- **-s** *service*

  Specify the service. Currently only challenge, login, and response are supported.

- **-v** *name*=*value*

  This option and its value are ignored.

**login\_token** will look up *user* in the appropriate database file, depending on what name it was called as: */etc/activ.db*, */etc/crypto.db*, or */etc/snk.db*. It then will issue a challenge, and if the user is able to correctly respond (by using the appropriate token) the user will be authenticated. The *class* argument is unused.

## FILES

- */etc/activ.db*

  data base of information for the ActivCard tokens.

- */etc/crypto.db*

  data base of information for the CRYPTOCard tokens.

- */etc/snk.db*

  data base of information for the SNK-004 tokens.

## DIAGNOSTICS

Diagnostic messages are logged via [syslog(3)](/syslog/3.md) with the LOG\_AUTH facility.

## SEE ALSO

[syslog(3)](/syslog/3.md), [login.conf(5)](/login.conf/5.md), [tokenadm(8)](/tokenadm/8.md), [tokeninit(8)](/tokeninit/8.md)

## AUTHORS

Jack Flory ⟨*jpf@mig.com*⟩