Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6 | HP-UX 11i v2

Introduction to the Kerberos Products and GSS-API

PAM Kerberos

Chapter 236

dtlogin session required /usr/lib/security/libpam_unix.1

dtaction session required /usr/lib/security/libpam_krb5.1

dtaction session required /usr/lib/security/libpam_unix.1

OTHER session sufficient /usr/lib/security/libpam_unix.1

# Password management

passwd password sufficient /usr/lib/security/libpam_krb5.1

passwd password required /usr/lib/security/libpam_unix.1

dtlogin password sufficient /usr/lib/security/libpam_krb5.1

dtlogin password required /usr/lib/security/libpam_unix.1

dtaction password sufficient /usr/lib/security/libpam_krb5.1

dtaction password required /usr/lib/security/libpam_unix.1

OTHER password sufficient /usr/lib/security/libpam_unix.1

On HP-UX 11i v1 and 11i v2

# PAM configuration

# This pam.conf file is intended as an example only.

# see pam.conf(4) for more details

# Authentication management

try_first_pass

su auth sufficient /usr/lib/security/$ISA/libpam_krb5.so.1

su auth required /usr/lib/security/$ISA/libpam_unix.so.1

try_first_pass

dtlogin auth sufficient /usr/lib/security/$ISA/libpam_krb5.so.1

dtlogin auth required /usr/lib/security/$ISA/libpam_unix.so.1

try_first_pass

dtaction auth sufficient /usr/lib/security/$ISA/libpam_krb5.so.1

dtaction auth required /usr/lib/security/$ISA/libpam_unix.so.1

try_first_pass

ftp auth sufficient /usr/lib/security/$ISA/libpam_krb5.so.1

ftp auth required /usr/lib/security/$ISA/libpam_unix.so.1

try_first_pass

OTHER auth sufficient /usr/lib/security/$ISA/libpam_unix.so.1

# Account management