crypto/heimdal-0.6.3/lib/auth/pam/pam.conf.add

   1 To enable PAM in dtlogin and /bin/login under SunOS 5.6 apply this patch:
   2
   3 --- /etc/pam.conf.DIST  Mon Jul 20 15:37:46 1998
   4 +++ /etc/pam.conf       Tue Feb 15 19:39:12 2000
   5 @@ -4,15 +4,19 @@
   6  #
   7  # Authentication management
   8  #
   9 +login  auth sufficient /usr/athena/lib/pam_krb4.so
  10  login  auth required   /usr/lib/security/pam_unix.so.1
  11  login  auth required   /usr/lib/security/pam_dial_auth.so.1
  12  #
  13  rlogin  auth sufficient /usr/lib/security/pam_rhosts_auth.so.1
  14  rlogin auth required   /usr/lib/security/pam_unix.so.1
  15  #
  16 +dtlogin        auth sufficient /usr/athena/lib/pam_krb4.so
  17  dtlogin        auth required   /usr/lib/security/pam_unix.so.1
  18  #
  19  rsh    auth required   /usr/lib/security/pam_rhosts_auth.so.1
  20 +# Reafslog is for dtlogin lock display
  21 +other  auth sufficient /usr/athena/lib/pam_krb4.so reafslog
  22  other  auth required   /usr/lib/security/pam_unix.so.1
  23  #
  24  # Account management
  25 @@ -24,6 +28,8 @@
  26  #
  27  # Session management
  28  #
  29 +dtlogin        session required        /usr/athena/lib/pam_krb4.so
  30 +login  session required        /usr/athena/lib/pam_krb4.so
  31  other  session required        /usr/lib/security/pam_unix.so.1
  32  #
  33  # Password management
  34 ---------------------------------------------------------------------------
  35 To enable PAM in /bin/login and xdm under Red Hat 6.? apply these patches:
  36
  37 --- /etc/pam.d/login~   Tue Dec  7 12:01:35 1999
  38 +++ /etc/pam.d/login    Wed May 31 16:27:55 2000
  39 @@ -1,9 +1,12 @@
  40  #%PAM-1.0
  41 +# Updated to work with kerberos
  42 +auth       sufficient   /usr/athena/lib/pam_krb4.so.1.0.1
  43  auth       required    /lib/security/pam_securetty.so
  44  auth       required    /lib/security/pam_pwdb.so shadow nullok
  45  auth       required    /lib/security/pam_nologin.so
  46  account    required    /lib/security/pam_pwdb.so
  47  password   required    /lib/security/pam_cracklib.so
  48  password   required    /lib/security/pam_pwdb.so nullok use_authtok md5 shadow
  49 +session    required     /usr/athena/lib/pam_krb4.so.1.0.1
  50  session    required    /lib/security/pam_pwdb.so
  51  session    optional    /lib/security/pam_console.so
  52 --- /etc/pam.d/xdm~     Wed May 31 16:33:54 2000
  53 +++ /etc/pam.d/xdm      Wed May 31 16:28:29 2000
  54 @@ -1,8 +1,11 @@
  55  #%PAM-1.0
  56 +# Updated to work with kerberos
  57 +auth       sufficient   /usr/athena/lib/pam_krb4.so.1.0.1
  58  auth       required    /lib/security/pam_pwdb.so shadow nullok
  59  auth       required    /lib/security/pam_nologin.so
  60  account    required    /lib/security/pam_pwdb.so
  61  password   required    /lib/security/pam_cracklib.so
  62  password   required    /lib/security/pam_pwdb.so shadow nullok use_authtok
  63 +session    required     /usr/athena/lib/pam_krb4.so.1.0.1
  64  session    required    /lib/security/pam_pwdb.so
  65  session    optional     /lib/security/pam_console.so
  66 --- /etc/pam.d/gdm~     Wed May 31 16:33:54 2000
  67 +++ /etc/pam.d/gdm      Wed May 31 16:34:28 2000
  68 @@ -1,8 +1,11 @@
  69  #%PAM-1.0
  70 +# Updated to work with kerberos
  71 +auth       sufficient   /usr/athena/lib/pam_krb4.so.1.0.1
  72  auth       required    /lib/security/pam_pwdb.so shadow nullok
  73  auth       required    /lib/security/pam_nologin.so
  74  account    required    /lib/security/pam_pwdb.so
  75  password   required    /lib/security/pam_cracklib.so
  76  password   required    /lib/security/pam_pwdb.so shadow nullok use_authtok
  77 +session    required     /usr/athena/lib/pam_krb4.so.1.0.1
  78  session    required    /lib/security/pam_pwdb.so
  79  session    optional     /lib/security/pam_console.so
  80
  81 --------------------------------------------------------------------------
  82
  83 This stuff may work under some other system.
  84
  85 # To get this to work, you will have to add entries to /etc/pam.conf
  86 #
  87 # To make login kerberos-aware, you might change pam.conf to look
  88 # like:
  89
  90 # login authorization
  91 login   auth       sufficient   /lib/security/pam_krb4.so
  92 login   auth       required     /lib/security/pam_securetty.so
  93 login   auth       required     /lib/security/pam_unix_auth.so
  94 login   account    required     /lib/security/pam_unix_acct.so
  95 login   password   required     /lib/security/pam_unix_passwd.so
  96 login   session    required     /lib/security/pam_krb4.so
  97 login   session    required     /lib/security/pam_unix_session.so