---
name: "pklogin_finder"
section: "1"
platform: "linux"
package: "libpam-pkcs11"
version: "0.6.13-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/pklogin_finder"
---

# pklogin\_finder(1)

maps certificates into a user

## NAME

pklogin\_finder - maps certificates into a user

## SYNTAX

**pklogin\_finder** \[**debug**\] \[**config\_file=*\<filename\>***\]

## DESCRIPTION

**pklogin\_finder** uses the pam\_pkcs11 library infrastructure to interactively map a PKCS#11 provided certificate to a user.

**pklogin\_finder** uses the the same configuration file and arguments than [**pam\_pkcs11**(8)](/pam_pkcs11/8.md) PAM module. Load defined mapper modules, and try to find a map between found certificates and a user login.

## OPTIONS

- **debug**

  Enable debugging output. Default is no debug.

- **config\_file=***\<configuration file\>*

  Sets the configuration file to use. Default value is */etc/pam\_pkcs11/pam\_pkcs11.conf*.

As it uses the same configuration file than pam\_pkcs11, all pam\_pkcs11 options are also available. Note that some of them has no sense in a non-PAM environment, so they will be ignored.

## RETURN VALUE

On success **pklogin\_finder** prints on stdout the login name and exits returns 0.

On user mapping error it returns 1.

On no user match it prints nothing and returns 2.

## FILES

*/etc/pam\_pkcs11/pam\_pkcs11.conf*

## EXAMPLES

To run this program the standard way, insert a smart card into the reader and type:\
  pklogin\_finder

Alternatively you can specify options:\
  pklogin\_finder debug config\_file=${HOME}/.pam\_pkcs11.conf

## AUTHORS

Juan Antonio Martinez \<jonsito@teleline.es\>

## SEE ALSO

[**pam\_pkcs11**(8)](/pam_pkcs11/8.md), [**pkcs11\_inspect**(1)](/pkcs11_inspect/1.md), PAM-PKCS11 User Manual