Solaris Smart Cards Administration Guide

How the User and Password Properties Work

On systems using the default authentication mechanism of PIN Password, ocfserv verifies the authenticity of the PIN as explained in "How the PIN Password Works". Next, ocfserv reads the user and password properties on the card. If the password on the smart card matches the user's entry in the system's password database, ocfserv gives the user access to the application.

You can define more than one user and password combination on a smart card. For example, the user of a smart card might need different login names and passwords to access different applications. Moreover, for a system administrator, you can define a standard login name and password, and a password for root on the card. However, the smart card can have only one PIN.