LDAP-UX Client Services B.04.00 Administrator's Guide

Appendix C 191
C Sample /etc/pam.ldap.trusted
file
This Appendix provides the sample PAM configuration file,
/etc/pam.ldap.trusted, used as the /etc/pam.conf file to support
the coexistence of LDAP-UX and Trusted Mode. This
/etc/pam.ldap.trusted file must be used as the /etc/pam.conf file if
your directory server is the Netscape Directory Server and your LDAP
client is in the Trusted Mode. If your system is in a standard mode, you
still need to use the /etc/pam.ldap file as the /etc/pam.conf file.
The following is a sample PAM configuration file,
/etc/pam.ldap.trusted, used on the HP-UX 11.0 or 11i v1 system:
#
# PAM configuration
#
# This pam.conf file is intended as an example only.
#
#
################################################################
# This configuration file has only been modified for default #
# services. Other services can be added or modified as needed #
# or desired. If a service is not listed, it will use the #
# OTHER classification. #
# #
# the format for a entry is #
# <service> <module_type> <control> <module path> <options> #
# #
# see pam.conf(4) for more details #
# #
# NOTE: This pam.conf file is recommended only if you convert #
# your system to a Trusted System. If your system is in the #
# Standard Mode, use the pam.ldap file as an example. #
# #
# #
################################################################
#
# Authentication management
#
login auth sufficient /usr/lib/security/libpam_ldap.1
login auth required /usr/lib/security/libpam_unix.1 try_first_pass
su auth sufficient /usr/lib/security/libpam_ldap.1
su auth required /usr/lib/security/libpam_unix.1 try_first_pass
dtlogin auth sufficient /usr/lib/security/libpam_ldap.1
dtlogin auth required /usr/lib/security/libpam_unix.1 try_first_pass
dtaction auth sufficient /usr/lib/security/libpam_ldap.1
dtaction auth required /usr/lib/security/libpam_unix.1 try_first_pass
ftp auth sufficient /usr/lib/security/libpam_ldap.1
ftp auth required /usr/lib/security/libpam_unix.1 try_first_pass
OTHER auth sufficient /usr/lib/security/libpam_ldap.1
OTHER auth required /usr/lib/security/libpam_unix.1 try_first_pass
# Account management
#
login account sufficient /usr/lib/security/libpam_ldap.1
login account required /usr/lib/security/libpam_unix.1
su account sufficient /usr/lib/security/libpam_ldap.1