Naming and Directory Services (DNS, NIS, and LDAP)

other password required pam_dhkeys.so.1other password requisite pam_authtok_get.so.1other password requisite pam_authtok_check.so.1other password required pam_authtok_store.so.1## Support for Kerberos V5 authentication and example configurations can# be found in the pam_krb5(5) man page under the "EXAMPLES" section.#Example pam_conf file for pam_ldapConfigured for Account ManagementNote – After you enable pam_ldap account management, all users must provide apassword any time they log in to the system. A login password is required forauthentication. Therefore, nonpassword-based logins using tools such as rsh,rlogin, orssh will fail.## Authentication management## login service (explicit because of pam_dial_auth)#login auth requisite pam_authtok_get.so.1login auth required pam_dhkeys.so.1login auth required pam_unix_cred.so.1login auth required pam_dial_auth.so.1login auth binding pam_unix_auth.so.1 server_policylogin auth required pam_ldap.so.1## rlogin service (explicit because of pam_rhost_auth)#rlogin auth sufficient pam_rhosts_auth.so.1rlogin auth requisite pam_authtok_get.so.1rlogin auth required pam_dhkeys.so.1rlogin auth required pam_unix_cred.so.1rlogin auth binding pam_unix_auth.so.1 server_policyrlogin auth required pam_ldap.so.1## rsh service (explicit because of pam_rhost_auth,# and pam_unix_auth for meaningful pam_setcred)#rsh auth sufficient pam_rhosts_auth.so.1rsh auth required pam_unix_cred.so.1rsh auth binding pam_unix_auth.so.1 server_policyrsh auth required pam_ldap.so.1Chapter 14 • LDAP General Reference (Reference) 201