Douglas E. Engert wrote: > > > Huie-Ying Lee wrote: >> Hello, >> >> The pam_pkcs11 module assumpts that all PKCS#11 tokens are >> smartcards, so it will display "Smart card" key word in the PAM >> prompt message. However, most of the PKCS#11 tokens are not Smart >> cards. so we modified some prompt messages to avoid confusion when >> we ported this module to Solaris OS. Attached is the patch file, >> please let me know if you have any comments. > > You are thinking like a programmer, not a user. Users don't know what > PKCS#11 or slots are, or even what PAM is. They know they have a device > and a place to plug it in to use it for login with a PIN. > I agreed with you that the "PKCS#11" keyword should be removed, as both Bob and Ludovic raised the concern as well.
The pam_pkcs11 module is built on top of a PKCS#11 library, so it should support any PKCS#11 tokens. For those non-smartcard situations, prompts with the "SmartCard" keyword might cause some confusions to a user, so we just tried to change it to be a little bit more generic. > The use of the term Smart card "password" is also confusing. I would > prefer the the word PIN, as it is not a password. > Either "password" or "PIN" is fine with me. Note that the word "password" is used in the original source code, not newly introduced by this patch. Thanks, Huie-Ying _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
