Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6 | HP-UX 11i v2

Introduction to the Kerberos Products and GSS-API
PAM Kerberos
Chapter 232
For example, with the following configuration, no
Kerberos authentication is conducted for the root user.
The use of pam_updbe is not mandatory. However, in
order for the functionality pam_updbe to take effect, it
must be listed as the first service module in
/etc.pam.conf. Refer to the manpage pam_updbe (5)
for more information about per user PAM
configuration.
debug The debug option sets syslog debugging information
at the LOG_DEBUG level.
Table 2-7 On HP-UX 11.0 and 11i
pam_user.conf:
#
# configuration for user root. KRB5 PAM module uses the ignore
# option and returns PAM_IGNORE without any processing.
#
root auth /usr/lib/security/libpam_krb5.1 ignore
root password /usr/lib/security/libpam_krb5.1 ignore
root account /usr/lib/security/libpam_krb5.1 ignore
root session /usr/lib/security/libpam_krb5.1 ignore
Table 2-8 On HP-UX 11i v1 and 11i v2
pam_user.conf:
#
# configuration for user root. KRB5 PAM module uses the ignore
# option and returns PAM_IGNORE without any processing.
#
root auth /usr/lib/security/$ISA/libpam_krb5.so.1 ignore
root password /usr/lib/security/$ISA/libpam_krb5.so.1 ignore
root account /usr/lib/security/$ISA/libpam_krb5.so.1 ignore
root session /usr/lib/security/$ISA/libpam_krb5.so.1 ignore