FYI, The pam_pkcs11 module is now available on OpenSolaris, starting in build snv_94. Also, all the relevant man pages (pam_pkcs11(5), pkcs11_inspect(1) and pklogin_finder(1)) will be available in snv_95.
The pam_pkcs11 module is a PAM-based login authentication module that is built on top of PKCS#11 token libraries. It allows a user to login to a system that supports PAM by using a certificate (and its dedicated private key) stored in a PKCS#11 token. The original source of this module is provided by opensc-project.org. The latest version is 0.6.0, which supports only the pam_authenticate() function for the authentication service. For more information, see the PAM-PKCS11 User Manual at the /usr/share/doc/pam_pkcs11 directory or at http://www.opensc-project.org/pam_pkcs11. This pam_pkcs11 module supports any PKCS#11 token library. In the Solaris OS, the PKCS#11 library for this module is the PKCS#11 Cryptographic Framework library, /usr/lib/libpkcs11.so.1. An administrator can configure the pam_pkcs11 module to use a specific slot/token. For more information, see the pam_pkcs11(5) man page. If you have any questions or comments, please post them to kmf-discuss at opensolaris.org. Thanks, Huie-Ying
