Administrator's Guide

su account required libpam_hpsec.so.1

su account required libpam_unix.so.1

2.3.5 The /etc/pam_user.conf User Configuration File

The PAM configuration file, /etc/pam_user.conf, configures PAM on a per-user

basis. This file is optional. It is needed only if PAM applications need to behave differently

for different users.

You assign different options to individual users by listing them in /etc/pam_user.conf.

For a login-name listed here, the options listed here replace any options specified

for the module-type and module-path in /etc/pam.conf.

The entries in /etc/pam_user.conf use the following syntax:

where:

module-type The module-type specified in /etc/pam.conf.

module-path The module-path associated with module-type in /etc/

pam.conf.

options Zero or more options recognized by the module.

The default contents of /etc/pam_user.conf are comments:

# This file defines PAM configuration for a user. The configuration

# here overrides pam.conf.

# The format for each entry is:

# user_name module_type module_path options

# For example:

# user_a auth /usr/lib/security/libpam_unix.1 debug

# user_a auth /usr/lib/security/libpam_dce.1 try_first_pass

# user_a password /usr/lib/security/libpam_unix.1 debug

# user_b auth /usr/lib/security/libpam_unix.1 debug use_psd

# user_b password /usr/lib/security/libpam_unix.1 debug use_psd

# See the pam_user.conf(4) manual page for more information

2.3.6 Examples: How PAM Works for Login

The following examples describe the auth process for login, depending upon how

the /etc/pam.conf file is configured:

• If /etc/pam.conf contains a single standard login auth, such as the following,

then login proceeds normally:

2.3 Authenticating Users with PAM 39