login_token(8)

login_token8

Provide activcard, cryptocard and snk-004 authentication

Usage

login_token [-s service] [-v name=value] user [class]

Overview

The login_token program implements an X9.9 token card challenge response authentication mechanism (see login.conf(5)). It must be invoked by one of the names: login_activ, login_crypto, or login_snk.

The options are as follows:

-s service

Specify the service. Currently only challenge, login, and response are supported.

-v name=value

This option and its value are ignored.

login_token will look up user in the appropriate database file, depending on what name it was called as: /etc/activ.db, /etc/crypto.db, or /etc/snk.db. It then will issue a challenge, and if the user is able to correctly respond (by using the appropriate token) the user will be authenticated. The class argument is unused.

Files

/etc/activ.db

data base of information for the ActivCard tokens.

/etc/crypto.db

data base of information for the CRYPTOCard tokens.

/etc/snk.db

data base of information for the SNK-004 tokens.

Diagnostics

Diagnostic messages are logged via syslog(3) with the LOG_AUTH facility.

Releases

52 releases since OpenBSD 3.0; the text changed 8 times.

  1. 3.0
  2. 3.1
  3. 3.2
  4. 3.3
  5. 3.4–4.1
  6. 4.2–4.6
  7. 4.7–5.0
  8. 5.1–5.3
  9. 5.4–8.0

Authors

Jack Flory ⟨[email protected]⟩

From man 8.0-current-20261101 in OpenBSD 8.0-current (2026-11-01). Parsed by carta from the page's mdoc source.