how to enable PAM in different Unix OS (Solaris 10, HPUX 11i, RH Linux v4 and above)

In AIX, we can enable PAM by modifying the token "auth_type" in file "/etc/security/login.cfg"  to "PAM_AUTH". If this is not done, it uses standard OS authentication "STD_AUTH".

Likewise, how can we enable system to use PAM rather than OS level authentication in

1) Solaris 10 sparc
2) HPUX 11i
3) RH Linux v4 and above

Pls consider this as priority
Deepti_vobilineniAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

gheistCommented:
1) it is default setting starting with v9
2) it is default but with somewhat limited config functionality (read manual)
3) there is no other choice starting with RH 7 10 years ago.

0
Deepti_vobilineniAuthor Commented:
Thank you for your reply.

Ok...so does that mean... there is no other authentication module other than PAM, that comes by default with all the 3 OSs (Solaris 10 sparc, HPUX11i, RedHat Linux).

Is there any way to verify that PAM is the current authentication module in these OS's.


0
gheistCommented:
I do not quite recall something like chkpam or pamchk or pamck has to be run from root account like:
# ckpam root
0
Learn SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

Deepti_vobilineniAuthor Commented:
Ok...I have tried all the 3...but of no luck...we need to verify whether PAM is current authentication module...and write a test case for that...

Could you please provide me with the command??

Thank you
0
woolmilkporcCommented:
Hi,
I think that all relevant programs (login, su, rsh ..., also ftp, ...) are linked against the PAM shared libraries.
So it's only a question of whether those libraries are present (according to gheist they are) and whether PAM is properly configured in either /etc/pam.conf or in the respective entries under /etc/pam.d/
You can use e.g. ldd /bin/login to verify that the program is linked against PAM. Check for presence of the displayed PAM lib(s) at your system.
Further, check /var/log/messages. The various PAM modules should log their activities there.
HTH
wmp
 
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Deepti_vobilineniAuthor Commented:
Thank you all for providing your valuable inputs and helping me in understanding. I appreciate your prompt response.

Cheers!!!!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Unix OS

From novice to tech pro — start learning today.