PAM/Krb5 support for Perl DBD ?

Hi folks, Does anyone know if and IDS client Perl program using : -revision 2011-06-12 of the Leffler DBD for Informix - on a client Linux SUSE 11.4 box -that has Informix CSDK 3.7 installed on it - to connect to IDS 11.7 - using PAM configured in "Password Mode" will support PAM/Krb5 authentications (Jonathan? Art?) Thanks in advance. Jim Cramer Database Administrator and Applications Developer The University of Iowa

On Fri, Oct 12, 2012 at 10:57 AM, jim-cramer@uiowa.edu <jim-cramer@uiowa.edu > wrote: > Does anyone know if and IDS client Perl program using : > > -revision 2011-06-12 of the Leffler DBD for Informix > - on a client Linux SUSE 11.4 box > -that has Informix CSDK 3.7 installed on it > - to connect to IDS 11.7 > - using PAM configured in "Password Mode" > > will support PAM/Krb5 authentications (Jonathan? Art?) > Since CSDK 3.7 supports it, DBD::Informix should. Challenge mode would be, ..., a challenge because of the necessity to support a callback in the DBI->connect() function, but plain old PAM and Kerberos should be OK. So, if you can get any ESQL/C program running in the environment and authenticating via PAM and Kerberos, you should be fine with DBD::Informix too. -- Jonathan Leffler <jonathan.leffler@gmail.com> #include <disclaimer.h> Guardian of DBD::Informix - v2011.0612 - http://dbi.perl.org "Blessed are we who can laugh at ourselves, for we shall never cease to be amused." --e89a8f23455d9acff104cbe2cdc5

Thank you for your response Jonathan. It looks like PAM is *not* working from the Perl program on the Linux SUSE workstation with CSDK. I made a mistake in my post and what is actually on this box is: clientsdk.3.50.FC7.LINUX.withDS but I do not believe that should matter. Below is the sqlhosts file for the installation of this CSDK on that machine. The line for the DBSERVERNAME "ids" is for connecting to the IDS 11.7 instance, which uses the same line in its sqlhosts file, with PAM. ODBC and JDBC apps from Windows are connecting to the respective port on this IDS instance and being authenticated via PAM/Krb5/ Active Directory just fine. But the Perl program on Linux does not connect with PAM. The line in the sqlhost file on the Linux client for the DBSERVERALIAS "ids_np" is for connecting to IDS and authenticating against the /etc/shadow file. That works just fine with the Perl app. Does anything jump out as to what might be wrong? I am not the Perl app developer and do not know DBI/DBD well so I was wondering if there could be anything in the Perl stuff that needs to be configured in order to use PAM in the simple password mode? If you do not spot anything, then I will build one of the esqlc demo programs, see if that works, and let you know. Thanks much Jim $INFORMIXDIR/etc/sqlhosts: ids onsoctcp 128.255.17.54 sqlexec s=4,pam_serv=(ifmx),pamauth=(password) ids_np onsoctcp 128.255.17.54 sqlexec_np s=3 ids_sso onsoctcp 128.255.17.54 sqlexec_sso s=7,csm=(GSSCSM) -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Jonathan Leffler Sent: Friday, October 12, 2012 3:48 PM To: ids@iiug.org Subject: Re: PAM/Krb5 support for Perl DBD ? [28510] On Fri, Oct 12, 2012 at 10:57 AM, jim-cramer@uiowa.edu <jim-cramer@uiowa.edu > wrote: > Does anyone know if and IDS client Perl program using : > > -revision 2011-06-12 of the Leffler DBD for Informix > - on a client Linux SUSE 11.4 box > -that has Informix CSDK 3.7 installed on it > - to connect to IDS 11.7 > - using PAM configured in "Password Mode" > > will support PAM/Krb5 authentications (Jonathan? Art?) > Since CSDK 3.7 supports it, DBD::Informix should. Challenge mode would be, ...., a challenge because of the necessity to support a callback in the DBI->connect() function, but plain old PAM and Kerberos should be OK. So, if you can get any ESQL/C program running in the environment and authenticating via PAM and Kerberos, you should be fine with DBD::Informix too. -- Jonathan Leffler <jonathan.leffler@gmail.com> #include <disclaimer.h> Guardian of DBD::Informix - v2011.0612 - http://dbi.perl.org "Blessed are we who can laugh at ourselves, for we shall never cease to be amused." --e89a8f23455d9acff104cbe2cdc5 **************************************************************************** *** Forum Note: Use "Reply" to post a response in the discussion forum.