HP-UX 11i Version 1.5 Release Notes, September 2001

Other Functionality

Changes to PAM

Chapter 8 139

su auth required /usr/lib/security/$ISA/libpam_unix.so.1

dtlogin auth required /usr/lib/security/$ISA/libpam_unix.so.1

dtaction auth required /usr/lib/security/$ISA/libpam_unix.so.1

ftp auth required /usr/lib/security/$ISA/libpam_unix.so.1

OTHER auth required /usr/lib/security/$ISA/libpam_unix.so.1

# Account management

su account required /usr/lib/security/$ISA/libpam_unix.so.1

dtlogin account required /usr/lib/security/$ISA/libpam_unix.so.1

dtaction account required /usr/lib/security/$ISA/libpam_unix.so.1

ftp account required /usr/lib/security/$ISA/libpam_unix.so.1

OTHER account required /usr/lib/security/$ISA/libpam_unix.so.1

# Session management

dtlogin session required /usr/lib/security/$ISA/libpam_unix.so.1

dtaction session required /usr/lib/security/$ISA/libpam_unix.so.1

OTHER session required /usr/lib/security/$ISA/libpam_unix.so.1

# Password management

passwd password required /usr/lib/security/$ISA/libpam_unix.so.1

dtlogin password required /usr/lib/security/$ISA/libpam_unix.so.1

dtaction password required /usr/lib/security/$ISA/libpam_unix.so.1

OTHER password required /usr/lib/security/$ISA/libpam_unix.so.1

============================================================================

Module providers can specify their own absolute path in the

/etc/pam.conf and /etc/pam_user.conf files. In addition, the PAM

engine library is modified to detect the $ISA token and the calling

application type. It will then load the correct PAM module that is of the

same architecture as the calling application. For example:

• 32-bit IPF applications

Loads /usr/lib/security/hpux32/libpam_unix.so.1.

• 32-bit PA applications

Loads /usr/lib/security/libpam_unix.so.1 which is a link to

/usr/lib/security/libpam_unix.1