LDAP-UX Client Services B.05.00 Administrator's Guide

module_type Specifies the service module type: authentication (auth), account
management (account), session management (session), or
password management (password).
required Specifies the control flag as required (mandatory).
libpam_updbe.so.1 Specifies the pathname to the PAM_UPDBE shared library object
that implements the service functionality. If the pathname is not
absolute, it is assumed to be relative to /usr/lib/security/
$ISA/.
For more details, see the pam_updbe(5) and pam_user.conf(4) manpages.
If PAM_HPSEC has been configured in /etc/pam.conf for the service you are going to
define for PAM_UPDBE, configure the PAM_UPDBE library in the line immediately following
the line that configures the service's PAM_HPSEC library. If PAM_HPSEC is not configured
for the given service, configure the PAM_UPDBE library as the first service module in /etc/
pam.conf. In either case, set the control flag for the PAM_UPDBE library as required.
PAM_UPDBE provides interfaces for all four PAM service module types (authentication
management, account management, session management, and password management).
Each service module reads the options defined for its type.
The following example is a portion of a /etc/pam.conf file that defines the PAM_UPDBE
library for the user login process. Because the PAM_HPSEC library is configured for each
service module, the PAM_UPDBE library configuration line is added immediately following
the corresponding service's PAM_HPSEC library configuration line.
# Authentication management
#
login auth required libpam_hpsec.so.1
login auth required libpam_updbe.so.1
login auth sufficient libpam_ldap.so.1
login auth required libpam_unix.so.1 try_first_pass
# Account management
#
login account required libpam_hpsec.so.1
login account required libpam_updbe.so.1
login account sufficient libpam_ldap.so.1
login account required libpam_unix.so.1
# Session management
#
login session required libpam_hpsec.so.1
login session required libpam_updbe.so.1
login session required libpam_ldap.so.1
login session required libpam_unix.so.1
# Password management
#
login password required libpam_hpsec.so.1
login password required libpam_updbe.so.1
login password sufficient libpam_ldap.so.1
login password required libpam_unix.so.1 try_first_pass
For more information, see the the pam.conf(4) and pam_updbe(5) manpages.
2.5 Post-installation configuration tasks 111