topic Re: pam_authz problem in Operating System - HP-UX

pam_authz problem

Dick CHAU — Tue, 15 Aug 2006 22:54:57 GMT

Hi all,

I am trying to implement LDAP auth in HP-UX and AIX environment. Any suggestion about setting host-based authentication? Thanks all.

Hi Bob,

May I have more details on it? Thanks.

Bob Neal-Joslin Jul 29, 2005 19:02:45
-----------------------------------------------
Note that it's also possbile to speicify an LDAP search filter for the "pam" service in the LDAP-UX configuration profile that can be used to restrict login from the libpam_ldap.so library, using specific attributes as defined in user's entries inthe directory. Reply if you need more details on this.

Re: pam_authz problem

Michael Steele_2 — Tue, 15 Aug 2006 23:44:23 GMT

Refer to IPSec in HP-UX which latest versions are LDAP friendly.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?hpweb_printable=true&productNumber=J4256AA

Re: pam_authz problem

Dick CHAU — Mon, 21 Aug 2006 03:36:02 GMT

using authz module

Re: pam_authz problem

Bob Neal-Joslin — Fri, 25 Aug 2006 15:09:48 GMT

Hi Dick,

It's not clear to me if you got your question answered. I'm asusming you'd like to use the hostsAllowedLogin and hostsDenyedLogin?

If so, a rule like

allow: ldap_filter:(hostsAllowdLogin=*hostname*)

in your pam_authz.policy file should work. Where *hostname* is the hostname of the local host, that would match the approprate attribute in the user's entry.

Depending on what else you have in your pam_authz.policy file, you may wish to place the libpam_authz after libpam_unix, to assure local users can log in.

Future versions of pam_authz should inprove this capability.