Provisioning Reference Guide › Pluggable Authentication Module (PAM) › Sample PAM Programs

Sample PAM Programs

CA IdentityMinder provides the following sample PAM programs:

• Windows NT
• ADS
• ADSMultiDomain
• Generic PAM sample

Note: The Generic PAM sample is included in \Provisioning Server SDK\admin\samples\SDK\PAM.

Each sample program includes the etaPAM.dll binary, which lets you authenticate to a local Windows system. Sample source code is provided in the Provisioning SDK for reference purposes only. Customization may be needed for a production deployment.

Any global user who needs to authenticate to CA IdentityMinder must exist in the Windows domain. This includes the special global user, etapwsad. This user must be created with the PasswordAdministrator profile. It does not exist by default.

If these users do not exist, the CA IdentityMinder clients will not function.

The Generic PAM Sample shows an example implementation of the PAM interface that does not actually communicate with an authentication system. This sample demonstrates how to implement the PAM interface on Windows or Solaris, without being tied to a particular platform for carrying out the user authentication.