Previous Topic: Sample PAM ProgramsNext Topic: Using PAM and Password Expiration

Provisioning Reference Guide › Pluggable Authentication Module (PAM) › Use PAM

Use PAM

The PAM program is called etaPam.dll. The etaPam.dll is in these folders:

The ADS version authenticates to a Windows domain controller in a single-domain or multi-domain ADS environment. To ensure that ADS domains are trusted and can be reached, the Provisioning Server must be in the ADS domain. The NT version authenticates to the local accounts database. By default, these programs authenticate passwords on Windows systems only.

To use PAM with other systems, write another PAM program for the system. Sample source for the Windows or UNIX PAM modules provided with CA IdentityMinder can be obtained by installing the Provisioning SDK. The generic PAM runs on UNIX and the NT and ADS samples run on Windows.