# Map the SNILS (OID 1.2.643.100.3) to auto-<SNILS hash> user name
#
pam_pkcs11 {
  use_mappers = generic;
  mapper generic {
    module = internal;
    ignorecase = false;
    cert_item  = 1.2.643.100.3;
    use_getpwent = false;
    prefix = auto-;
    postfix = "";
    scramble = true;
    maxlen = 12;
    mapfile = file:///etc/security/pam_pkcs11/snils_mapping;
  }
}
