Skip to main content

Mail mapping is only secure when the CA was verified.
It is also a convenient way to test pam_pkcs11 settings.

Define the mapper:

use_mappers = mail;

Create /etc/pam_pkcs11/mail_mapping

# mapping file for Certificate E-email
# format: email -> login

foo@bar.com -> foo

Adapt to your user and email.