1# 2# CDDL HEADER START 3# 4# The contents of this file are subject to the terms of the 5# Common Development and Distribution License, Version 1.0 only 6# (the "License"). You may not use this file except in compliance 7# with the License. 8# 9# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10# or http://www.opensolaris.org/os/licensing. 11# See the License for the specific language governing permissions 12# and limitations under the License. 13# 14# When distributing Covered Code, include this CDDL HEADER in each 15# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16# If applicable, add the following below this CDDL HEADER, with the 17# fields enclosed by brackets "[]" replaced with your own identifying 18# information: Portions Copyright [yyyy] [name of copyright owner] 19# 20# CDDL HEADER END 21# 22# 23#ident "%Z%%M% %I% %E% SMI" 24# 25# Copyright 2004 Sun Microsystems, Inc. All rights reserved. 26# Use is subject to license terms. 27# 28# PAM configuration 29# 30# Unless explicitly defined, all services use the modules 31# defined in the "other" section. 32# 33# Modules are defined with relative pathnames, i.e., they are 34# relative to /usr/lib/security/$ISA. Absolute path names, as 35# present in this file in previous releases are still acceptable. 36# 37# Authentication management 38# 39# login service (explicit because of pam_dial_auth) 40# 41login auth requisite pam_authtok_get.so.1 42login auth required pam_dhkeys.so.1 43login auth required pam_unix_cred.so.1 44login auth required pam_unix_auth.so.1 45login auth required pam_dial_auth.so.1 46# 47# rlogin service (explicit because of pam_rhost_auth) 48# 49rlogin auth sufficient pam_rhosts_auth.so.1 50rlogin auth requisite pam_authtok_get.so.1 51rlogin auth required pam_dhkeys.so.1 52rlogin auth required pam_unix_cred.so.1 53rlogin auth required pam_unix_auth.so.1 54# 55# Kerberized rlogin service 56# 57krlogin auth required pam_unix_cred.so.1 58krlogin auth binding pam_krb5.so.1 59krlogin auth required pam_unix_auth.so.1 60# 61# rsh service (explicit because of pam_rhost_auth, 62# and pam_unix_auth for meaningful pam_setcred) 63# 64rsh auth sufficient pam_rhosts_auth.so.1 65rsh auth required pam_unix_cred.so.1 66# 67# Kerberized rsh service 68# 69krsh auth required pam_unix_cred.so.1 70krsh auth binding pam_krb5.so.1 71krsh auth required pam_unix_auth.so.1 72# 73# Kerberized telnet service 74# 75ktelnet auth required pam_unix_cred.so.1 76ktelnet auth binding pam_krb5.so.1 77ktelnet auth required pam_unix_auth.so.1 78# 79# PPP service (explicit because of pam_dial_auth) 80# 81ppp auth requisite pam_authtok_get.so.1 82ppp auth required pam_dhkeys.so.1 83ppp auth required pam_unix_cred.so.1 84ppp auth required pam_unix_auth.so.1 85ppp auth required pam_dial_auth.so.1 86# 87# Default definitions for Authentication management 88# Used when service name is not explicitly mentioned for authentication 89# 90other auth requisite pam_authtok_get.so.1 91other auth required pam_dhkeys.so.1 92other auth required pam_unix_cred.so.1 93other auth required pam_unix_auth.so.1 94# 95# passwd command (explicit because of a different authentication module) 96# 97passwd auth required pam_passwd_auth.so.1 98# 99# cron service (explicit because of non-usage of pam_roles.so.1) 100# 101cron account required pam_unix_account.so.1 102# 103# Default definition for Account management 104# Used when service name is not explicitly mentioned for account management 105# 106other account requisite pam_roles.so.1 107other account required pam_unix_account.so.1 108# 109# Default definition for Session management 110# Used when service name is not explicitly mentioned for session management 111# 112other session required pam_unix_session.so.1 113# 114# Default definition for Password management 115# Used when service name is not explicitly mentioned for password management 116# 117other password required pam_dhkeys.so.1 118other password requisite pam_authtok_get.so.1 119other password requisite pam_authtok_check.so.1 120other password required pam_authtok_store.so.1 121# 122# Support for Kerberos V5 authentication and example configurations can 123# be found in the pam_krb5(5) man page under the "EXAMPLES" section. 124# 125