topic Re: PAM Authentication in Administration and Deployment

PAM Authentication

AnkitDedhia — Mon, 15 Jun 2015 10:12:49 GMT

Has anyone worked on PAM Authentication on Windows and Linux machines.

We currently have IWA for authentication and wish to move to PAM for Authentication, if you could share some insights while doing so would really help.

Regards,

Ankit

Re: PAM Authentication

ronan — Mon, 15 Jun 2015 14:02:24 GMT

On Linux (RHEL 5 & 6), we have set up PAM authentication some time ago for SAS Servers. We had issues on IOM SAS sessions (Stored Process, Workspace etc.) authentication because SAS authentication proxy (SASELSRV) didn't response correctly. The following change quickly resolved the problem :

Modify  "sasauth.conf" :


$SASROOT/utilities/bin/sasauth.conf






(line no. 40)


methods=pam




(line no. 164)


GROUP_NOCASE=TRUE   uncommented

Re: PAM Authentication

AnkitDedhia — Mon, 15 Jun 2015 14:08:20 GMT

Thanks Ronan.

We are struggling to find expertise for implementation of PAM on Linux (RHEL 6) if you have any documentation with regards to the same please share.

Re: PAM Authentication

jakarman — Mon, 15 Jun 2015 14:33:58 GMT

Using pam on Unix is possible compromising the system security

. Be sure you get those guys aligned to use pam. It is the only option on Linux with Sas. Only aix is supporting LAM. Following the instructions should give no technical problem.

Only when going into mixed authentication providers with IWA there is a lot.

http://support.sas.com/documentation/cdl/en/bisecag/67045/HTML/default/viewer.htm#n0bggv0uyqm3m0n1ngn9g94i70nz.htm

(line no. 40)	methods=pam
(line no. 164)	GROUP_NOCASE=TRUE uncommented