#

#

#

#

# PAM configuration

#

# Unless explicitly defined, all services use the modules

# defined in the "other" section.

#

# Modules are defined with relative pathnames, i.e., they are

# relative to /usr/lib/security/$ISA. Absolute path names, as

# present in this file in previous releases are still acceptable.

#

# Authentication management

#

# login service (explicit because of pam_dial_auth)

#

login	auth requisite		pam_authtok_get.so.1

login	auth required		pam_dhkeys.so.1

login	auth required		pam_unix_cred.so.1

login	auth required		pam_dial_auth.so.1

#

# rlogin service (explicit because of pam_rhost_auth)

#

rlogin	auth sufficient		pam_rhosts_auth.so.1

rlogin	auth requisite		pam_authtok_get.so.1

rlogin	auth required		pam_dhkeys.so.1

rlogin	auth required		pam_unix_cred.so.1

rlogin	auth required		pam_unix_auth.so.1

#

# Kerberized rlogin service

#

krlogin	auth required		pam_unix_cred.so.1

#

# rsh service (explicit because of pam_rhost_auth,

# and pam_unix_auth for meaningful pam_setcred)

#

rsh	auth sufficient		pam_rhosts_auth.so.1

rsh	auth required		pam_unix_cred.so.1

#

# Kerberized rsh service

#

krsh	auth required		pam_unix_cred.so.1

#

# Kerberized telnet service

#

ktelnet	auth required		pam_unix_cred.so.1

#

# PPP service (explicit because of pam_dial_auth)

#

ppp	auth requisite		pam_authtok_get.so.1

ppp	auth required		pam_dhkeys.so.1

ppp	auth required		pam_unix_cred.so.1

ppp	auth required		pam_unix_auth.so.1

ppp	auth required		pam_dial_auth.so.1

#

#

#

# Default definitions for Authentication management

# Used when service name is not explicitly mentioned for authentication

#

other	auth requisite		pam_authtok_get.so.1

other	auth required		pam_dhkeys.so.1

other	auth required		pam_unix_cred.so.1

other	auth required		pam_unix_auth.so.1

#

# passwd command (explicit because of a different authentication module)

#

#

# cron service (explicit because of non-usage of pam_roles.so.1)

#

cron	account required	pam_unix_account.so.1

#

# Default definition for Account management

# Used when service name is not explicitly mentioned for account management

#

other	account requisite	pam_roles.so.1

#

# Default definition for Session management

# Used when service name is not explicitly mentioned for session management

#

other	session required	pam_unix_session.so.1

#

# Used when service name is not explicitly mentioned for password management

#

other	password required	pam_dhkeys.so.1

other	password requisite	pam_authtok_get.so.1

other	password required	pam_authtok_store.so.1

#

# Support for Kerberos V5 authentication and example configurations can

# be found in the pam_krb5(5) man page under the "EXAMPLES" section.

#