Re: Authentication with PAM

Use ODBC pass thru security option. i.e. ODBC can be configured to pass your Domain UID & PWD to the database server. You will have to create syncronised list of users accounts and PWD's on the Linux or Unix server. This is 'common as muck'. Most VB apps can pass their workstation domain identities thru to the database server by correct setting of the ODBC connection string "....;UID=;PWD=;...." etc Noel "Ines Mueller" <i.mueller@digitask.de> wrote in message news:bde8ov$rcg$04$1@news.t-online.com... > Hi, > > we have some questions regarding informix authentication on > linux using the pam-system. > > At the moment we have a windows nt domain with a pdc and > some workstations, which authenticate themselves using the > domain. Some of the workstations are informix-Clients > with our software connecting to the db via odbc/informix-net, > one of the workstations is our db-server. Like i said, it > is also in the NT-Domain, so every login (local or via > informix-net) works using user/passwd from the NT-domain > (no local users on the db-server except Administrator and > informix). > > Now we evaluate switching the DB-Server to Linux (for stability > and performance reasons). We cant get rid of the other windows- > workstations, because of our windows-software-clients :-) > So we would like to do the db-logins using the NT-Domain. > If we'd have to create every user from the NT-Domain second > time on the db-server, this would be a huge drawback.. > > I searched google (web, comp.databases.informix,...) and > found the pam_smb module, which seems to be the right choice > for this purpose and installed it on the db-server > (SuSE Linux 8.1 (Kernel 2.4.19-4, glibc 2.2.5), > Informix 7.31UD5-1, pam_smb 1.1.6). > > 2 Problems : > 1.) Trying pam_smb with sshd for instance, i can use my NT-Domain > user/passwd only if the same user exists as a local linux-user > too (even with the pam_smb-Option nolocal) > > 2.) It seems that our Informix-version isn't capable of using pam > at all (I found some hints, but no definitive answer to that). > > So : Is it possible or not ? > > (If pam doesn't work with this Informix version at all, there > is no sense in trying to solve problem 1 any longer.) > > Thanks and bye... > > Regards, > Ines M'ller > > >