HP-UX 11i Version 1.5 Release Notes, May 2001

Table Of Contents
Other Functionality
Changes to PAM
Chapter 8138
Changes to PAM
PAM (Pluggable Authentication Module) gives system administrators
the flexibility of choosing any authentication service available on the
system to perform authentication. The framework interface is
implemented by the library /usr/lib/libpam.1 and new authentication
service modules can be plugged in and made available without modifying
the applications. The authentication services are implemented by their
own loadable modules whose paths are specified through the
/etc/pam.conf and /etc/pam_user.conf files.
In order for PAM to support multiple instruction set architectures (i.e.
32/64-bit IPF/PA), the Corrigendum U039 of the PAM Standard is
implemented in HP-UX 11i Version 1.5 (B.11.20) (see
http://www.opengroup.org/pubs/corrigenda/u039f.htm). The standard
does not allow mixing of 32/64-bit (for example, a 32-bit application
cannot execute 64-bit library code).
The format of the /etc/pam.conf and /etc/pam_user.conf files and
the paths of the pluggable service authentication modules have changed.
The paths have not changed for 32-bit PAM libraries for PA architecture.
New paths are assigned for new architectures supported starting with
the this release. The new paths are for 32-bit IPF PAM libraries, 64-bit
IPF PAM libraries, and 64-bit PA libraries.
NOTE 64-bit PAM support is not yet available for IPF and PA.
The new pam.conf and pam_user.conf files also support the $ISA token
as defined by Corrigendum U039.
Here is the new pam.conf file (note the comment):
==============================================================================
#
# PAM configuration
#
# Authentication management
# Note: For PA applications, /usr/lib/security/libpam_unix.so.1 is a
# symbolic link that points to the corresponding PA PAM module.
#
#