Solved

how to enable PAM in different Unix OS (Solaris 10, HPUX 11i, RH Linux v4 and above)

Posted on 2009-06-29
6
917 Views
Last Modified: 2013-12-16
In AIX, we can enable PAM by modifying the token "auth_type" in file "/etc/security/login.cfg"  to "PAM_AUTH". If this is not done, it uses standard OS authentication "STD_AUTH".

Likewise, how can we enable system to use PAM rather than OS level authentication in

1) Solaris 10 sparc
2) HPUX 11i
3) RH Linux v4 and above

Pls consider this as priority
0
Comment
Question by:Deepti_vobilineni
  • 3
  • 2
6 Comments
 
LVL 62

Assisted Solution

by:gheist
gheist earned 250 total points
ID: 24743660
1) it is default setting starting with v9
2) it is default but with somewhat limited config functionality (read manual)
3) there is no other choice starting with RH 7 10 years ago.

0
 

Author Comment

by:Deepti_vobilineni
ID: 24743676
Thank you for your reply.

Ok...so does that mean... there is no other authentication module other than PAM, that comes by default with all the 3 OSs (Solaris 10 sparc, HPUX11i, RedHat Linux).

Is there any way to verify that PAM is the current authentication module in these OS's.


0
 
LVL 62

Assisted Solution

by:gheist
gheist earned 250 total points
ID: 24743700
I do not quite recall something like chkpam or pamchk or pamck has to be run from root account like:
# ckpam root
0
Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

 

Author Comment

by:Deepti_vobilineni
ID: 24743733
Ok...I have tried all the 3...but of no luck...we need to verify whether PAM is current authentication module...and write a test case for that...

Could you please provide me with the command??

Thank you
0
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 250 total points
ID: 24743820
Hi,
I think that all relevant programs (login, su, rsh ..., also ftp, ...) are linked against the PAM shared libraries.
So it's only a question of whether those libraries are present (according to gheist they are) and whether PAM is properly configured in either /etc/pam.conf or in the respective entries under /etc/pam.d/
You can use e.g. ldd /bin/login to verify that the program is linked against PAM. Check for presence of the displayed PAM lib(s) at your system.
Further, check /var/log/messages. The various PAM modules should log their activities there.
HTH
wmp
 
0
 

Author Comment

by:Deepti_vobilineni
ID: 24783049
Thank you all for providing your valuable inputs and helping me in understanding. I appreciate your prompt response.

Cheers!!!!
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Attention: This article will no longer be maintained. If you have any questions, please feel free to mail me. jgh@FreeBSD.org Please see http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-update-server/ for the updated article. It is avail…
FreeBSD on EC2 FreeBSD (https://www.freebsd.org) is a robust Unix-like operating system that has been around for many years. FreeBSD is available on Amazon EC2 through Amazon Machine Images (AMIs) provided by FreeBSD developer and security office…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question