pam_authz problem

[Dick CHAU]

Hi all,

I am trying to implement LDAP auth in HP-UX and AIX environment. Any suggestion about setting host-based authentication? Thanks all.

Hi Bob,

May I have more details on it? Thanks.



Bob Neal-Joslin Jul 29, 2005 19:02:45
-----------------------------------------------
Note that it's also possbile to speicify an LDAP search filter for the "pam" service in the LDAP-UX configuration profile that can be used to restrict login from the libpam_ldap.so library, using specific attributes as defined in user's entries inthe directory. Reply if you need more details on this.

[Michael Steele_2]

Refer to IPSec in HP-UX which latest versions are LDAP friendly.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?hpweb_printable=true&productNumber=J4256AA

[Dick CHAU]

using authz module

[Bob Neal-Joslin]

Hi Dick,

It's not clear to me if you got your question answered. I'm asusming you'd like to use the hostsAllowedLogin and hostsDenyedLogin?

If so, a rule like

allow: ldap_filter:(hostsAllowdLogin=*hostname*)

in your pam_authz.policy file should work. Where *hostname* is the hostname of the local host, that would match the approprate attribute in the user's entry.

Depending on what else you have in your pam_authz.policy file, you may wish to place the libpam_authz after libpam_unix, to assure local users can log in.

Future versions of pam_authz should inprove this capability.