Mail mapping is only secure when the CA was verified.
It is also a convenient way to test pam_pkcs11 settings.
Define the mapper:
use_mappers = mail;
Create /etc/pam_pkcs11/mail_mapping
# mapping file for Certificate E-email
# format: email -> login
foo@bar.com -> foo
Adapt to your user and email.
Printer-friendly version- 931 reads
PDF version




