Is there P.A.M. or Kerberos authentication support in IDS?
Hi all, We do not wish to use the age-old, insecure, arcane Unix login authentication method that hits against the /etc/passwd file when logging into our IDS servers. Instead, we would like to use a centralized, networked authentication/account server such as a Kerberos Domain Controller. Specifically, my question is: does anyone know of any support in Informix Dynamic Server for use of either P.A.M. (Pluggable Authentication Module) (Kerberos is one authentication plugin module that works with the PAM framework) or for Kerberos authentication? Any information about this would be greatly appreciated. Sincerely, Jim Cramer Data Base Administrator Computer Systems Support, College of Engineering, University of Iowa 1252 SC Iowa City, Iowa 52242 (319)335-5757 (319)384-0549 (fax)
Support for PAM is implemented with 9.4UC2 M.P. "Jim Cramer" <jcramer@engineering.uiowa.edu> wrote in message news:bupb2t$ari$1@server05.icaen.uiowa.edu... > Hi all, > > We do not wish to use the age-old, insecure, arcane Unix login > > authentication method that hits against the /etc/passwd file when logging > into our > > IDS servers. > > Instead, we would like to use a centralized, networked > authentication/account server such as > > a Kerberos Domain Controller. > > Specifically, my question is: does anyone know of any support in Informix > Dynamic > > Server for use of either P.A.M. (Pluggable Authentication Module) > > (Kerberos is one authentication plugin module that works with the PAM > framework) > > or for Kerberos authentication? > > Any information about this would be greatly appreciated. > > > > Sincerely, > > Jim Cramer > > Data Base Administrator > > Computer Systems Support, > > College of Engineering, > > University of Iowa > > 1252 SC > > Iowa City, Iowa 52242 > > (319)335-5757 > > (319)384-0549 (fax) > >
On Thu, 22 Jan 2004 15:15:20 -0500, Jim Cramer wrote: IDS 9.3 and later support PAM. Documentation is in the Administrator's Guide and Administrator's Reference. Art S. Kagel > Hi all, > > We do not wish to use the age-old, insecure, arcane Unix login > > authentication method that hits against the /etc/passwd file when logging > into our > > IDS servers. > > Instead, we would like to use a centralized, networked > authentication/account server such as > > a Kerberos Domain Controller. > > Specifically, my question is: does anyone know of any support in Informix > Dynamic > > Server for use of either P.A.M. (Pluggable Authentication Module) > > (Kerberos is one authentication plugin module that works with the PAM > framework) > > or for Kerberos authentication? > > Any information about this would be greatly appreciated. > > > > Sincerely, > > Jim Cramer > > Data Base Administrator > > Computer Systems Support, > > College of Engineering, > > University of Iowa > > 1252 SC > > Iowa City, Iowa 52242 > > (319)335-5757 > > (319)384-0549 (fax)