Solved

how to enable PAM in different Unix OS (Solaris 10, HPUX 11i, RH Linux v4 and above)

Posted on 2009-06-29
6
911 Views
Last Modified: 2013-12-16
In AIX, we can enable PAM by modifying the token "auth_type" in file "/etc/security/login.cfg"  to "PAM_AUTH". If this is not done, it uses standard OS authentication "STD_AUTH".

Likewise, how can we enable system to use PAM rather than OS level authentication in

1) Solaris 10 sparc
2) HPUX 11i
3) RH Linux v4 and above

Pls consider this as priority
0
Comment
Question by:Deepti_vobilineni
  • 3
  • 2
6 Comments
 
LVL 61

Assisted Solution

by:gheist
gheist earned 250 total points
Comment Utility
1) it is default setting starting with v9
2) it is default but with somewhat limited config functionality (read manual)
3) there is no other choice starting with RH 7 10 years ago.

0
 

Author Comment

by:Deepti_vobilineni
Comment Utility
Thank you for your reply.

Ok...so does that mean... there is no other authentication module other than PAM, that comes by default with all the 3 OSs (Solaris 10 sparc, HPUX11i, RedHat Linux).

Is there any way to verify that PAM is the current authentication module in these OS's.


0
 
LVL 61

Assisted Solution

by:gheist
gheist earned 250 total points
Comment Utility
I do not quite recall something like chkpam or pamchk or pamck has to be run from root account like:
# ckpam root
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:Deepti_vobilineni
Comment Utility
Ok...I have tried all the 3...but of no luck...we need to verify whether PAM is current authentication module...and write a test case for that...

Could you please provide me with the command??

Thank you
0
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 250 total points
Comment Utility
Hi,
I think that all relevant programs (login, su, rsh ..., also ftp, ...) are linked against the PAM shared libraries.
So it's only a question of whether those libraries are present (according to gheist they are) and whether PAM is properly configured in either /etc/pam.conf or in the respective entries under /etc/pam.d/
You can use e.g. ldd /bin/login to verify that the program is linked against PAM. Check for presence of the displayed PAM lib(s) at your system.
Further, check /var/log/messages. The various PAM modules should log their activities there.
HTH
wmp
 
0
 

Author Comment

by:Deepti_vobilineni
Comment Utility
Thank you all for providing your valuable inputs and helping me in understanding. I appreciate your prompt response.

Cheers!!!!
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Let's say you need to move the data of a file system from one partition to another. This generally involves dismounting the file system, backing it up to tapes, and restoring it to a new partition. You may also copy the file system from one place to…
In tuning file systems on the Solaris Operating System, changing some parameters of a file system usually destroys the data on it. For instance, changing the cache segment block size in the volume of a T3 requires that you delete the existing volu…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now