X-Git-Url: http://www.average.org/gitweb/?p=pam_pcsc_cr.git;a=blobdiff_plain;f=README.md;h=2ebc86fb2c65d7178de60a01a5640f768d69f047;hp=23aa837107ab31f62a3b3a89fe9f56457417455c;hb=852dfc60feda9313c12310d646e66baef9fb83b2;hpb=194a1c30bd4a0668debc82f40eefa49adfc11a8e diff --git a/README.md b/README.md index 23aa837..2ebc86f 100644 --- a/README.md +++ b/README.md @@ -84,12 +84,7 @@ according to template that can be provided both to PAM module and to the setup program (and must be the same, obviously). In the template string, character '~' in the first position is substituted with the userid's home directory, '~' in a position other than first - with the userid -itself, and character '?' - with the "tokenid". This latter is just an -arbitrary string that is not involved in the authentication process. -But, if the template contains '?' but not '~', login process can start -without the knowlege of the userid. Userid will be picked from the file -and injected into the PAM environment, given that tokenid is known from -the start. +itself. Default template string is `~/.pam_cr/auth`, i.e. the file lives in the user's home directory, in the subdirectory `.pam_cr`. @@ -115,7 +110,7 @@ The only backend option existing is "ykneo:slot=1" or "ykneo:slot=2". Slot 2 is the default. Secret must be supplied when creating the file, and when modifying the file in the absense of the token. Password is used to construct the challenge. If not supplied empty string is used. -The pam module also used empty string when given "noaskpass" argument, +The pam module also uses empty string when given "noaskpass" argument, so this can be used for "one factor" authentication mode with token only. Payload is a string that can be optionally injected as the PAM authentication token after successful authentication; subsequent PAM