topic Re: PAM modules in Operating System - HP-UX

PAM modules

JJ de Haas — Thu, 21 Dec 2006 09:53:15 GMT

Hi,

Does anyone know if the pam_hpsec module that's in HP-UX 11.23 is also available for HP 11.11 and 11.00?

I would like to be able to use all the /etc/default/security file options on all our HP systems.

Tips on other PAM modules that do the same (and are maintained/supported) are also quite welcome.

Thanks,
Jan.

Re: PAM modules

Simon Hargrave — Thu, 21 Dec 2006 10:12:03 GMT

Which specific feature are you requiring?

If you read the man page for security on an 11.11 and on an 11.23 box, features on 11.23 that require pam_hpsec (NOLOGIN, NUMBER_OF_LOGINS_ALLOWED etc) are supported in 11.11 without the need for pam_hpsec.

My guess would be that this functionality was broken out into a separate PAM library in 11.23 onwards and was part of the standard authentication (perhaps in a different pam module, or hard coded into login etc?)

Re: PAM modules

Denver Osborn — Thu, 21 Dec 2006 10:20:14 GMT

It's a new pam module introduced with 11i v2.

http://docs.hp.com/en/5990-8153/ch08s12.html

-denver

Re: PAM modules

JJ de Haas — Thu, 21 Dec 2006 10:34:13 GMT

Definitely want to implement the password rule set options (minimum number of lower/uppercase chars, digits and special chars).

Also minimum password length and password history would be nice to have.

I might get the same fuctionality from another (OS?) module, but if possible I'd like to stick with the vendor specific module.

Thanks,
Jan.

Re: PAM modules

George Liu_4 — Thu, 21 Dec 2006 10:40:34 GMT

I am afraid libpam_hpsec is not available on 11i or earlier version

Re: PAM modules

JJ de Haas — Fri, 22 Dec 2006 04:15:03 GMT

Yes, that's what I was afraid of. I'll see what's available in OS.

Thanks,
Jan.