LDAP-UX Client Services B.05.00 with Microsoft Windows Active Directory Server Administrator's Guide (obsolete beyond B.05.00)

or no password has been entered, the user is prompted for a password. If the use_first_pass
option had been specified instead, and the password does not match the database or has not
been entered, authentication fails. If no options are specified, each module acts independently,
each requesting passwords for its own database.
#
#
# PAM configuration
#
# This pam.conf file is intended as an example only.
# For more details, see pam.conf(4).
#
################################################################
# This sample file will authenticate the user who belongs to #
# either Kerberos or the Unix system. Using this configuration #
# file, if the user is authenticated through Kerberos, then the#
# Unix authentication will not be invoked. However, if the #
# Kerberos authentication fails for the user, then the fallback#
# authentication mechanism PAM-Unix is invoked to authenticate #
# the user. The assumption is the user is either present #
# in Kerberos or in the Unix system. #
# #
# The module pam_hpsec is specified at the top of each #
# stack for making security checks before authentication. #
# For more information about pam_hpsec, see the pam_hpsec(5) #
# manpage. #
################################################################
#
# Authentication management
#
login auth required libpam_hpsec.so.1
login auth sufficient libpam_krb5.so.1
login auth required libpam_unix.so.1 try_first_pass
su auth required libpam_hpsec.so.1
su auth sufficient libpam_krb5.so.1
su auth required libpam_unix.so.1 try_first_pass
dtlogin auth required libpam_hpsec.so.1
dtlogin auth sufficient libpam_krb5.so.1
dtlogin auth required libpam_unix.so.1 try_first_pass
dtaction auth required libpam_hpsec.so.1
dtaction auth sufficient libpam_krb5.so.1
dtaction auth required libpam_unix.so.1 try_first_pass
ftp auth required libpam_hpsec.so.1
ftp auth sufficient libpam_krb5.so.1
ftp auth required libpam_unix.so.1 try_first_pass
OTHER auth required libpam_unix.so.1
#
# Account management
#
login account required libpam_hpsec.so.1
login account sufficient libpam_krb5.so.1
login account required libpam_unix.so.1
su account required libpam_hpsec.so.1
su account sufficient libpam_krb5.so.1
su account required libpam_unix.so.1
dtlogin account required libpam_hpsec.so.1
dtlogin account sufficient libpam_krb5.so.1
dtlogin account required libpam_unix.so.1
dtaction account required libpam_hpsec.so.1
dtaction account sufficient libpam_krb5.so.1
dtaction account required libpam_unix.so.1
ftp account required libpam_hpsec.so.1
ftp account sufficient libpam_krb5.so.1
C.1 Sample PAM configuration file typical for integration with Windows 151