1To enable PAM in dtlogin and /bin/login under SunOS 5.6 apply this patch: 2 3--- /etc/pam.conf.DIST Mon Jul 20 15:37:46 1998 4+++ /etc/pam.conf Tue Feb 15 19:39:12 2000 5@@ -4,15 +4,19 @@ 6 # 7 # Authentication management 8 # 9+login auth sufficient /usr/athena/lib/pam_krb4.so 10 login auth required /usr/lib/security/pam_unix.so.1 11 login auth required /usr/lib/security/pam_dial_auth.so.1 12 # 13 rlogin auth sufficient /usr/lib/security/pam_rhosts_auth.so.1 14 rlogin auth required /usr/lib/security/pam_unix.so.1 15 # 16+dtlogin auth sufficient /usr/athena/lib/pam_krb4.so 17 dtlogin auth required /usr/lib/security/pam_unix.so.1 18 # 19 rsh auth required /usr/lib/security/pam_rhosts_auth.so.1 20+# Reafslog is for dtlogin lock display 21+other auth sufficient /usr/athena/lib/pam_krb4.so reafslog 22 other auth required /usr/lib/security/pam_unix.so.1 23 # 24 # Account management 25@@ -24,6 +28,8 @@ 26 # 27 # Session management 28 # 29+dtlogin session required /usr/athena/lib/pam_krb4.so 30+login session required /usr/athena/lib/pam_krb4.so 31 other session required /usr/lib/security/pam_unix.so.1 32 # 33 # Password management 34--------------------------------------------------------------------------- 35To enable PAM in /bin/login and xdm under Red Hat 6.? apply these patches: 36 37--- /etc/pam.d/login~ Tue Dec 7 12:01:35 1999 38+++ /etc/pam.d/login Wed May 31 16:27:55 2000 39@@ -1,9 +1,12 @@ 40 #%PAM-1.0 41+# Updated to work with kerberos 42+auth sufficient /usr/athena/lib/pam_krb4.so.1.0.1 43 auth required /lib/security/pam_securetty.so 44 auth required /lib/security/pam_pwdb.so shadow nullok 45 auth required /lib/security/pam_nologin.so 46 account required /lib/security/pam_pwdb.so 47 password required /lib/security/pam_cracklib.so 48 password required /lib/security/pam_pwdb.so nullok use_authtok md5 shadow 49+session required /usr/athena/lib/pam_krb4.so.1.0.1 50 session required /lib/security/pam_pwdb.so 51 session optional /lib/security/pam_console.so 52--- /etc/pam.d/xdm~ Wed May 31 16:33:54 2000 53+++ /etc/pam.d/xdm Wed May 31 16:28:29 2000 54@@ -1,8 +1,11 @@ 55 #%PAM-1.0 56+# Updated to work with kerberos 57+auth sufficient /usr/athena/lib/pam_krb4.so.1.0.1 58 auth required /lib/security/pam_pwdb.so shadow nullok 59 auth required /lib/security/pam_nologin.so 60 account required /lib/security/pam_pwdb.so 61 password required /lib/security/pam_cracklib.so 62 password required /lib/security/pam_pwdb.so shadow nullok use_authtok 63+session required /usr/athena/lib/pam_krb4.so.1.0.1 64 session required /lib/security/pam_pwdb.so 65 session optional /lib/security/pam_console.so 66--- /etc/pam.d/gdm~ Wed May 31 16:33:54 2000 67+++ /etc/pam.d/gdm Wed May 31 16:34:28 2000 68@@ -1,8 +1,11 @@ 69 #%PAM-1.0 70+# Updated to work with kerberos 71+auth sufficient /usr/athena/lib/pam_krb4.so.1.0.1 72 auth required /lib/security/pam_pwdb.so shadow nullok 73 auth required /lib/security/pam_nologin.so 74 account required /lib/security/pam_pwdb.so 75 password required /lib/security/pam_cracklib.so 76 password required /lib/security/pam_pwdb.so shadow nullok use_authtok 77+session required /usr/athena/lib/pam_krb4.so.1.0.1 78 session required /lib/security/pam_pwdb.so 79 session optional /lib/security/pam_console.so 80 81-------------------------------------------------------------------------- 82 83This stuff may work under some other system. 84 85# To get this to work, you will have to add entries to /etc/pam.conf 86# 87# To make login kerberos-aware, you might change pam.conf to look 88# like: 89 90# login authorization 91login auth sufficient /lib/security/pam_krb4.so 92login auth required /lib/security/pam_securetty.so 93login auth required /lib/security/pam_unix_auth.so 94login account required /lib/security/pam_unix_acct.so 95login password required /lib/security/pam_unix_passwd.so 96login session required /lib/security/pam_krb4.so 97login session required /lib/security/pam_unix_session.so 98