how to disable pam on 11x server?

[Hanry Zhou]

We want to use the mechanism on 10.20 server using /usr/bin/passwd.

Thanks,

[Steven E. Protter]

I would suggest using NIS, with the 10.20 server as the Master server.

That might work, but I've no idea.

HP 11 needs pam to properly authenticate logins.

SEP

[Hanry Zhou]

Sep,

For some reasons we don't want to use the authentication on 11x box, and don't wan tot use nis.

10.20 uses /usr/bin/passwd, that is what we want.

I found a thread in knowledge base. It says to add nowan to disable pam. but this is not working. I think that "nowarn" only turn off pam error messages, but not disable pam.

[Karthik S S]

Hi,

I think it is possible to disable PAM for authentication if you are using Secure Shell.

Refer:
http://docs.hp.com/hpux/onlinedocs/T1471-90010/00/00/13-con.html

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

-Karthik S S

[Patrick Wallek]

I don't think you can disable PAM. PAM still used the passwd commands. For exact configuration have a look at /etc/pam.conf. You will notice that it calls libpam_unix.1 for its authentication routine. That in turn I believe calls the passwd routines. So you are still using those even though PAM is installed.

For more information on what libpam_unix does have a look at the pam_unix man page.

# man pam_unix

[Hanry Zhou]

Patrick,

I've already tested, the pam will use its own function to manage /etc/ppasswd (any changes, aging, etc.), not use /usr/bin/passwd. I want the system to specificly invoke /usr/bin/passwd ONLY as 10.20 does.

[Hanry Zhou]

Karthik,

I added "UsePAM no", but not working.

Thanks,

[Patrick Wallek]

I guess my biggest question at this point is "WHY?"

What are you trying to accomplish by going backwards?

As said above, I don't think you can disable PAM. I think what you want to do is not possible.