Configuring a Pluggable Authentication Module (PAM) for UNIX

Set up Sybase Control Center to support username and password login using accounts on the UNIX operating system. Optionally, have Sybase Control Center create an account when a UNIX user first logs in to Sybase Control Center.

Using a login account with root privileges, configure the pluggable authentication module for your platform:

Platform	Action
Solaris	Append the contents of the <SCC-install-dir>/utility/`sunos`/pam.conf file (provided with Sybase Control Center) to the /etc/pam.conf file on your Solaris platform.
Linux	Copy the <SCC-install-dir>/utility/`linux`/sybase-ua file (provided with Sybase Control Center) to the /etc/pam.d directory on your Linux platform. Note: The sybase-ua file provided with Sybase Control Center is not compatible with the most recent SUSE Linux versions. For SUSE 11 and later, see the example at the end of this topic.

Note: In the table above, the portion of the path that indicates the operating system might differ slightly from what is shown.

If the host UNIX system is not using a directory lookup for authentication (yp or NIS, for example) and authentication is carried out against the local /etc/passwd file, change the permissions on /etc/shadow to provide read access to the login account that executes SCC.
(Skip if you configured a PAM before starting Sybase Control Center) Restart Sybase Control Center.
(Optional) If you want Sybase Control Center to create an account when a UNIX user logs in to Sybase Control Center, execute these steps. If you choose not to create Sybase Control Center accounts automatically, you must enter them manually. Sybase Control Center needs the accounts for purposes of setting authorization (user privileges).
1. Log in to Sybase Control Center using an account with administrative privileges (sccAdminRole).
2. Select Application > Administration > Security.
3. Check the box labeled Automatically add SCC login records for authenticated logins.
4. Click OK to close the Security dialog.

Example: PAM for SUSE Linux 11 and later

For SUSE 11 and later, do not use the sybase-ua file provided with Sybase Control Center. Instead, in your /etc/pam.d directory, create a sybase-ua file that contains:

# sybase-ua PAM Configuration (SUSE style)
auth       include      common-auth
account    include      common-account
password   include      common-password
session    include      common-session

Next

There are two next steps:

If you opted not to automatically create Sybase Control Center login accounts, enter each account into Sybase Control Center manually.
Whether you add accounts automatically or manually, you must also grant privileges to the login accounts. You can grant privileges by assigning Sybase Control Center roles directly to the login accounts, or by assigning the login accounts to groups and mapping Sybase Control Center roles to the groups. The group approach is generally more efficient.