Configuration Guide for Kerberos Client Products on HP-UX

Introduction to the Kerberos Products and GSS-API

PAM Kerberos

Chapter 234

The PAM Framework

Figure 2-1 shows the relationship between the PAM Kerberos Library

and various authentication modules that HP-UX provides. Note that the

PAM Kerberos Library is one of the many authentication modules that

PAM can invoke based on what is defined under the PAM configuration

file: /etc/pam.conf.

Figure 2-1 HP-UX authentication modules under

PAM

PAM Kerberos is invoked for user authentication, when PAM’s

authentication-management module is pointed to the shared

dynamically loadable PAM Kerberos library, libpam_krb5. Table 2-1

indicates the location of the library on both Itanium

and PA-RISC

based platforms.

PAM library

UNIX DCE Kerberos LDAP NTLM

libpam_krb5.1 libpam_ntlm.1libpam_unix.1

passwd

Authentication

Service

libpam_dce.1 libpam_ldap.1

Use the PAM configuration

file, pam.conf, to indicate

which authentication module to u