HP Operations Manager for UNIX Administrator’s Reference

About HPOM Security
About Security in HPOM
Uncomment the appropriate lines in the ovo.info.SunOS.5.x.txt file
prior to installation (unless it is a CD-based installation) and make sure
that those patches are installed on the management server system prior
to configuring PAM.
LDAP PAM authentication on Sun Solaris is available with the HPOM
for Unix 8.11 management server patch.
The following OS patches are a prerequisite for PAM support on Sun
Solaris:
❏ Sun Solaris 8
108993-45, or superseding
❏ Sun Solaris 9
112960-22, or superseding
❏ Sun Solaris 10
No patches are required.
PAM User Authentication Restrictions The following restrictions
apply to PAM user authentication with HPOM:
❏
❏
❏
No account or session management
HPOM PAM does not support PAM account nor session
management. It uses PAM purely for authentication.
Account setup and management
Account setup and management (including password update) must
be done using external tools depending on the PAM mechanism used.
For example, if the UNIX passwd PAM module is used, the standard
UNIX commands have to be used to deal with user accounts and
passwords on the OS level.
The HPOM password change facility only updates the user's
password in the HPOM database. This password is not used for
authentication when PAM authentication is enabled. Use external
tools to modify or set the user’s password.
Multiple password requests
It is not possible to use authentication stacks which request multiple
passwords.
Chapter 11 367