LDAP-UX Client Services B.04.15 Administrator's Guide

# <service> <module_type> <control> <module path> <options>
# #
# # see pam.conf(4) for more details
# #
# # NOTE: This pam.conf file is recommended only if you convert
# # your system to a Trusted System. If your system is in the
# # Standard Mode, use the pam.ldap file as an example.
# #
# # NOTE: If the path to a library is not absolute, it is assumed#
# to be relative to the directory /usr/lib/security/$ISA. #
# The "$ISA (i.e Instruction Set Architecture) token is #
# replaced by the PAM engine (libpam) with "hpux64" for IA #
# 64-bit modules, or with "hpux32" for IA 32-bit modules, or #
# with "pa20_64" for PA 64-bit modules, or with NULL for PA #
# 32-bit modules. #
# For PA applications, library name ending with "so.1" is a #
# symbolic link that points to the corresponding PA (32 or 64 #
# bit) backend library. #
################################################################
# # Authentication management # login auth required
libpam_hpsec.so.1 login auth sufficient libpam_ldap.so.1
login auth required libpam_unix.so.1 try_first_pass su
auth required libpam_hpsec.so.1 su auth sufficient
libpam_ldap.so.1 su auth required libpam_unix.so.1
try_first_pass dtlogin auth required libpam_hpsec.so.1
dtlogin auth sufficient libpam_ldap.so.1 dtlogin auth required
libpam_unix.so.1 try_first_pass dtaction auth required
libpam_hpsec.so.1 dtaction auth sufficient libpam_ldap.so.1
dtaction auth required libpam_unix.so.1 try_first_pass ftp
auth required libpam_hpsec.so.1 ftp auth sufficient
libpam_ldap.so.1 ftp auth required libpam_unix.so.1
try_first_pass rcomds auth required libpam_hpsec.so.1
rcomds auth sufficient libpam_ldap.so.1 rcomds auth required
libpam_unix.so.1 try_first_pass sshd auth required
libpam_hpsec.so.1 sshd auth sufficient libpam_ldap.so.1
sshd auth required libpam_unix.so.1 try_first_pass OTHER
auth sufficient libpam_ldap.so.1 OTHER auth required
libpam_unix.so.1 try_first_pass # Account management # login
account required libpam_hpsec.so.1 login account sufficient
libpam_ldap.so.1 login account required libpam_unix.so.1
su account required libpam_hpsec.so.1 su account
sufficient libpam_ldap.so.1 su account required libpam_unix.so.1
dtlogin account required libpam_hpsec.so.1 dtlogin account
sufficient libpam_ldap.so.1 dtlogin account required libpam_unix.so.1
dtaction account required libpam_hpsec.so.1 dtaction account
sufficient libpam_ldap.so.1 dtaction account required libpam_unix.so.1
ftp account required libpam_hpsec.so.1 ftp account
sufficient libpam_ldap.so.1 ftp account required libpam_unix.so.1
rcomds account required libpam_hpsec.so.1 rcomds account
sufficient libpam_ldap.so.1 rcomds account required libpam_unix.so.1
sshd account required libpam_hpsec.so.1 sshd account
sufficient libpam_ldap.so.1 sshd account required libpam_unix.so.1
ftp account required libpam_unix.so.1 OTHER account
sufficient libpam_ldap.so.1 OTHER account required libpam_unix.so.1
# Session management # login session required libpam_hpsec.so.1
login session requried libpam_ldap.so.1 login session
required libpam_unix.so.1 dtlogin session required libpam_hpsec.so.1
dtlogin session required libpam_ldap.so.1 dtlogin session
required libpam_unix.so.1 dtaction session required libpam_hpsec.so.1
dtaction session required libpam_ldap.so.1 dtaction session
required libpam_unix.so.1 ftp session required libpam_hpsec.so.1
bypass_limit_login bypass_umask
bypass_nologin ftp session requried libpam_ldap.so.1 ftp
session required libpam_unix.so.1 rcomds session required
libpam_hpsec.so.1 bypass_limit_login rcomds session required
libpam_ldap.so.1 rcomds session required libpam_unix.so.1
sshd session required libpam_hpsec.so.1 sshd session
required libpam_ldap.so.1 sshd session required libpam_unix.so.1
OTHER session required libpam_ldap.so.1 OTHER session
required libpam_unix.so.1 # Password management # login
password required libpam_hpsec.so.1 login password sufficient
libpam_ldap.so.1 login password required libpam_unix.so.1
try_first_pass passwd password required libpam_hpsec.so.1
passwd password sufficient libpam_ldap.1 passwd password
required libpam_unix.so.1 try_first_pass dtlogin password required
libpam_hpsec.so.1 dtlogin password sufficient libpam_ldap.so.1
dtlogin password required libpam_unix.so.1 try_first_pass
sshd password required libpam_hpsec.so.1 sshd password
sufficient libpam_ldap.so.1 sshd password required
libpam_unix.so.1 try_first_pass OTHER password sufficient
libpam_ldap.so.1 OTHER password required libpam_unix.so.1
try_first_pass
248 Sample /etc/pam.ldap.trusted file