HP OpenView Operations Administrator's Reference - filibeto.org

To Configure PAM User Authentication
About OVO Security
About Security in OVO Operations
1. To enable PAM user authentication in OVO, set the variable
OPC_USE_PAM_AUTH to TRUE:
/opt/OV/bin/ovconfchg -ovrg server -ns opc -set \
OPC_USE_PAM_AUTH TRUE
This setting will instruct OVO to use PAM as authentication
mechanism. It will become effective after the OVO management
server processes are restarted.
2. Configure PAM to route the OVO authentication requests to the
desired PAM module.
Add the following entry to the PAM configuration file pam.conf:
pam.conf(4):
ovo auth required
ovo The OVO application ID.
auth Defines that the module is used for authentication
only.
required The authentication step must succeed.
The PAM module to be used, or technically a
shared library which implements the
authentication mechanism like UNIX passwd,
Kerberos, NIS, or LDAP.
For example, to use UNIX passwd authentication use the following
entries in pam.conf:
HP-UX (except on HP-UX 11.23 Itanium)
ovo auth required /usr/lib/security/libpam_unix.1
ovo account required /usr/lib/security/libpam_unix.1
HP-UX 11.23 Itanium
ovo auth required \
/usr/lib/security/hpux32/libpam_ldap.so.1
ovo account required \
/usr/lib/security/hpux32/libpam_ldap.so.1
Chapter 12 501