TCB / pam.conf / SAM

[steve_12]

I was wondering whether anyone could point me in the right direction to where I might find some documentation on pam.conf format when the system is TCB.

My reason is I seem to be having problems when I try to access certain areas in SAM when doing the following :

Auditing and Security from the first menu, Authenticating commands from the second menu, Account management from the third menu, this generated the following error:

Checking the PAM configuration file for errors...
At least one entry in the PAM configuration file "/etc/pam.conf" is invalid. The format for each entry is:



The command, auth type, control flag and module fields are all required; the module options field is optional. Check the SAM log to determine which PAM configuration file entries are not valid. These entries must be corrected or removed before SAM can be used to manage the file.

---
The entries it is complaining about work fine for the seos product. Only SAM seems to complain about them, and I am wondering if it is related to the machine being TCB.

The authentication module used in a PAM configuration file entry must be registered in the SAM module registry "/var/sam/ts/pam_mod.reg" for the authentication type being used. The module in the following PAM configuration file entry is not valid: login auth optional /usr/lib/security/pam_seos.sl

The authentication module used in a PAM configuration file entry must be registered in the SAM module registry "/var/sam/ts/pam_mod.reg" for the authentication type being used. The module in the following PAM configuration file entry is not valid: login account optional /usr/lib/security/pam_seos.sl

Thanks

[Steven Troxel]

Steve,

Did you ever get an answer to your question? We are having the same problem with the pam_mod.reg file.

Thanks!