Installing and Administering Internet Services

Chapter 10 421
Using rdist
Starting rdist
configuration information for authenticating users. Adding the lines
above tell rexec and remsh to use the UNIX authentication mechanism
to authenticate the users.
For every service (like rexec and remsh), it is possible to have more than
one entry in the /etc/pam.conf file for each of the module types
available. The module types supported include:
• authentication (auth)
• account management (account)
• session management (session)
• password management (passwd)
Enabling DCE Integrated Logging Authentication
To enable DCE integrated logging authentication mechanism, add the
following line to the /etc/pam.conf file:
rcomds auth required /usr/lib/security/libpam_dce.1
Using remshd enabled with PAM in Secure Internet Services
Environment
The rexec service is not kerberised and will not work in the SIS
environment. However, the remshdservice is kerberised. To usethe PAM
modules in the SIS environment, add the following line to the
/etc/pam.conf file.
rcomds auth required /usr/lib/security/libpam_dce.1
Also in the Kerberos environment, remshd has command line options for
combining UNIX method and Kerberos method of authentication. A
combination of both Kerberos and UNIX authentication is available.
These command line options can be set in the /etc/inetd.conf for the
"kremshd" service. Refer to the kremshd(1m) manpage for a more
detailed description of the options available.