Re: Centrify single sign on

On Apr 8, 4:35 pm, Fernando Nunes <s...@onlinedomus.net> wrote: > prich...@blm.gov wrote: > > Fernando, > > > Thank you again for your reply. > > > Your Question: Is {pam_aix} an AIX native module or is this a module > > provided by Centrify? > > > My Answer: /usr/lib/security/pam_aix is an AIX native module and part > > of the AIX file set bos.rte.security. > > > Thank you for confirming that putting important system users such as > > informix in /etc/passwd is a good idea. > > > I am making progress on the interrelationships between Informix, PAM, > > and AIX. You have been an immense help. > > > -Park > > If and when you have the time try to clarify one point, just for my curiosity. > You're configuring IDS with PAM using an AIX native module to talk to MS AD. > > What exactly is the role of Centrify? > > Thanks > > -- > Fernando Nunes > Portugal > > http://informix-technology.blogspot.com > My email works... but I don't check it frequently... Centrify is the link from AIX to AD that provides the login name and password for the user, also the uid, gid, gecos, etc. AFAIK I need Centrify running for PAM to work on AIX. I could be wrong, as I often am. I'm aware that there are ways to query AD with Kerberos. I had that running but I needed NIS to get the uid, gid, gecos, etc. So I was using Kerberos to get the user's password from AD. And I had Informix running with PAM and all that was working. However, when I upgraded Kerberos for security reasons I could not get that configuration running again. That pushed me into trying out Centrify. -Park