Re: IDS - PAM AUTHENTICATION ANYONE WHO HAVE ACTUALLY MANAGED TO USE

Posted in 2005

Abhishek Mathur — Thu, 28 Jul 2005 15:10:43 — source: IIUG Forums & Mailing Lists

This is a multipart message in MIME format. --=_related 00527B0E8625704C_= Content-Type: text/html; charset="US-ASCII" Hi,         I think the location of the pam_serv file is not correct. I believe it should be under /usr/lib/security. Also, the pam_serv file is a PAM service module written by the user (typically a shared object ) and placed in the /usr/lib/security directory on the machine where the server is located.         Please also refer to the following article for more details - http://www-128.ibm.com/developerworks/db2/zones/informix/library/techarticle/030 6mathur/0306mathur.html Thanks and Regards, <table width=100%> <tr> <td width=37% bgcolor=white>Abhishek Mathur IBM - Information Management 913-599-7109 (T/L - 337-7109) abhishek@us.ibm.com <td width=62% bgcolor=white><a href=http://www.ibm.com/ibm/values/><img src=cid:_2_0A9116F009625BE000527B098625704C></a></table> <table width=100%> <tr valign=top> <td width=40%>"Stefan Sammut" <ssammut@ptl.com.mt> Sent by: forum.subscriber@iiug.org 07/28/2005 06:14 AM <td width=59%> <table width=100%> <tr valign=top> <td> <div align=right>To</div> <td>ids@iiug.org <tr valign=top> <td> <div align=right>cc</div> <td> <tr valign=top> <td> <div align=right>Subject</div> <td>IDS - PAM AUTHENTICATION ANYONE WHO HAVE ACTUALLY MANAGED TO USE IT PLEASE??? [5503]</table> <table> <tr valign=top> <td> <td></table> </table> <tt>Hello People. We've been trying to use the IDS PAM authentication module for the past 2 weeks, but we seem done only a little progresses. We followed the release notes under $INFORMIXDIR/release/en_us/0333/pam.txt; The sqlhosts file is set up as follows. tadinda_tcp onsoctcp    acilia  1525 s=4,pam_serv=(informix),pamauth=(challenge) The informix file (pam_serv) under /etc/init.d reads as follows: #%PAM-1.0 #auth     optional       pam_toledo.so /usr/informix tadinda_tcp auth     required       pam_rps.so debug account  required       pam_rps.so debug password required       pam_rps.so debug session  required       pam_rps.so debug We have tried many of the available services  ( pam_unix_passwd,even our own!) , but with this configuration (using the pam_rps service) we the nearest since when  running the esqlc pam_demo example prompts back with a challenge. However it consistently returns the -1809 error! We're running IDS 10.0.3 and seems pam documentation is rather misleading and incomplete. We looked throughout the whole net but found nothing helpful.  We need to use PAM with PowerBuilder and so far we've managed to get PowerBuilder 10 to talk to an esqlc generated DLL (already a big step). The first person who manages to get the callback function example working, we can update IIUG with new relevant PAM documentation including PowerBuilder connectivity. Many thanks for your help. The esqlc pam_demo ($INFORMIXDIR/demo/esqlc/pam_demo.ec reads as follows: #include <stdio.h> #include <string.h> #define PAM_PROMPT_ECHO_OFF 1 #define PAM_PROMPT_ECHO_ON 2 #define PAM_ERROR_MSG 3 #define PAM_TEXT_INFO 4 #define PAM_MAX_MSG_SIZE        512 EXEC SQL define FNAME_LEN       40; EXEC SQL define LNAME_LEN       40; int callback(char *challenge, char *response, int msg_style); int main() { EXEC SQL BEGIN DECLARE SECTION;    char fname[ FNAME_LEN + 1 ];    char lname[ LNAME_LEN + 1 ];    char dbpass[20];    char dbuser[20];    char dbname[20]; EXEC SQL END DECLARE SECTION; int retval = 0; /* First register the callback. This needs to be done before establishing the * connection as done here. */  printf("Starting PAM demo \\ ");  EXEC SQL WHENEVER ERROR STOP;  retval = ifx_pam_callback(callback);  if (retval == -1)        {        printf("Error in registering callback\\ ");        return (-1);        }  else        { printf("Callback Registered. Status=%d\\ ",retval);        strcpy(dbpass,"mibobva");        strcpy(dbuser,"acilia");        strcpy(dbname,"cell");        printf( "Callback function registered.\\ "); /*        EXEC SQL connect to :dbname user :dbuser using :dbpass; */          EXEC SQL database  :dbname ;        printf ("SQLCODE ON CONNECT = %d\\ ", SQLCODE);        EXEC SQL declare pamcursor cursor for            select customer,name               into :fname, :lname               from slcustm;        EXEC SQL open pamcursor;        for (;;)            {            EXEC SQL fetch pamcursor;            if (strncmp(SQLSTATE, "00", 2) != 0) {            break; }        printf("%s %s\\ ",fname, lname);            }        if (strncmp(SQLSTATE, "02", 2) != 0)            printf("SQLSTATE after fetch is %s\\ ", SQLSTATE);        EXEC SQL close pamcursor; &nbs

Re: IDS - PAM AUTHENTICATION ANYONE WHO HAVE ACTUALLY MANAGED TO USE

Related threads

Your privacy choices