HP OpenView Operations Administrator's Reference - filibeto.org

About OVO Security
About Security in OVO Operations
504
PAM User Authentication Restrictions The following restrictions
apply to PAM user authentication with OVO:
❏ Motif GUI as root user
PAM authentication for UNIX passwd authentication can be used on
OVO for Sun Solaris only if the Motif GUI is started as a root user.
❏ No account or session management
OVO PAM does not support PAM account nor session management.
It uses PAM purely for authentication.
❏ Account setup and management
Account setup and management (including password update) must
be done using external tools depending on the PAM mechanism used.
For example, if the UNIX passwd PAM module is used, the standard
UNIX commands have to be used to deal with user accounts and
passwords on the OS level.
The OVO password change facility only updates the user's password
in the OVO database. This password is not used for authentication
when PAM authentication is enabled. Use external tools to modify or
set the user’s password.
❏ Multiple password requests
It is not possible to use authentication stacks which request multiple
passwords.
To Disable PAM User Authentication To disable PAM user
authentication in OVO, set the variable OPC_USE_PAM_AUTH to FALSE:
The new setting will become effective after the management server
processes are restarted.
Chapter 12