Hello,

On Sat, Sep 27, 2008 at 12:27 AM, Huie-Ying Lee <[EMAIL PROTECTED]> wrote:
> The  pam_pkcs11 module assumpts that all PKCS#11 tokens are smartcards, so
> it will display "Smart card" key word in the PAM prompt message.    However,
>  most of the PKCS#11 tokens are not Smart cards. so we modified some prompt
> messages to avoid confusion when
> we ported this module to Solaris OS.

What are your PKCS#11 tokens? USB tokens?

I agree with Bob, explicitly using "PKCS#11 slot" is not
understandable by most users.

I propose to use a configuration here. The default name would be
"smart card" but the admin could use "secure token" or whatever else.
We could add a "token_name" parameter in the pkcs11_module
configuration.

  # NSS (Network Security Service) config
  pkcs11_module nss {
    nss_dir = /etc/ssl/nssdb;
    crl_policy = none;
    token_name = "secure slot"
  }

Comments?

-- 
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to