HP HP-UX Kerberos Data Security Software : Configuration Guide for Kerberos Client Products on HP-UX 11.0 | HP-UX 11i v1 | HP-UX 11i v1.6

Introduction to the Kerberos Products and GSS-API

PAM Kerberos

Chapter 2 39

pam_user.conf on HP-UX 11.0 and 11i

# configuration for user root. KRB5 PAM module uses the

# ignore option and returns PAM_IGNORE

root auth /usr/lib/security/libpam_krb5.1 ignore

root password /usr/lib/security/libpam_krb5.1 ignore

root account /usr/lib/security/libpam_krb5.1 ignore

root session /usr/lib/security/libpam_krb5.1 ignore

pam_user.conf on HP-UX 11i v1 and 11i v2

# configuration for user root. KRB5 PAM module uses the

# ignore option and returns PAM_IGNORE

root auth /usr/lib/security/$ISA/libpam_krb5.so.1 ignore

root password /usr/lib/security/$ISA/libpam_krb5.so.1 ignore

root account /usr/lib/security/$ISA/libpam_krb5.so.1 ignore

root session /usr/lib/security/$ISA/libpam_krb5.so.1 ignore

pam.conf on HP-UX 11.0 and 11i

# For per user configuration the libpam_updbe.1 (pam_updbe(5)) module

# must be the first module in the stack. If Kerberos authentication

# is valid the UNIX authentication function will not be invoked.

login auth required /usr/lib/security/libpam_updbe.1

login auth sufficient /usr/lib/security/libpam_krb5.1

login auth required /usr/lib/security/libpam_unix.1 try_first_pass

login password required /usr/lib/security/libpam_updbe.1

login password required /usr/lib/security/libpam_krb5.1

login password required /usr/lib/security/libpam_unix.1 try_first_pass

login account required /usr/lib/security/libpam_updbe.

login account required /usr/lib/security/libpam_krb5.1

pam.conf on HP-UX 11i v1 and 11i v2

# For per user configuration the libpam_updbe.1 (pam_updbe(5)) module

# must be the first module in the stack. If Kerberos authentication

# is valid the UNIX authentication function will not be invoked.

login auth required /usr/lib/security/$ISA/libpam_updbe.so.1

login auth sufficient /usr/lib/security/$ISA/libpam_krb5.so.1

login auth required /usr/lib/security/$ISA/libpam_unix.so.1

try_first_pass

login password required /usr/lib/security/$ISA/libpam_updbe.so.1

login password required /usr/lib/security/$ISA/libpam_krb5.so.1

login password required /usr/lib/security/$ISA/libpam_unix.so.1