Adaptive Server logins and PAM user accounts

After you have set enable PAM user authentication and completed the PAM configuration for both Adaptive Server and the operating system, you must configure the user accounts. The operating system or network security administrator creates and maintains user accounts in the PAM service provider, and the database administrator creates and maintains accounts in Adaptive Server. Alternatively, the database administrator can choose administration options that allow flexibility with login accounts when integrating Adaptive Server with external authentication mechanisms such as PAM. The database administrator continues to administer the Adaptive Server account roles, default database, default language, and other login-specific attributes using traditional commands and procedures.

Table 5-13 describes updates to syslogins made at login time. It assumes that\

PAM user authentication is configured, the login is not restricted from using PAM, and you have not set the create login mapping.

Table 5-13: Updates to syslogins from PAM

Does the row exist in syslogins?

PAM authentication succeeds?

Changes in syslogins

No

Yes

No change, login fails

No

No

No change, login fails

Yes

Yes

Update row if password has changed

Yes

No

No change