Configuring a connection to use PAM

You configure a connection to use a pluggable authentication module (PAM) by adding the PAM options to the connection information in the sqlhosts file.

About this task

To configure a connection to use PAM, you must know:

  • The name of the PAM module.
  • Whether the PAM module raises a challenge in addition to accepting a simple user name and password combination.

Procedure

To configure PAM authentication for a connection:
Edit the sqlhosts file for the connection. Include the s=4 option and the PAM options pam_serv, to specify the PAM service, and pamauth, to specify the authentication mode.

Example

The following sqlhosts file entry shows a connection that is configured to use PAM challenge authentication: 
ifxserver2 onsoctcp servermc portnum1 s=4,pam_serv=(pam_chal),pamauth=(challenge)
The following sqlhosts file entry shows a connection that is configured to use PAM password authentication: 
ifxserver2 onsoctcp servermc portnum2 s=4,pam_serv=(pam_pass),pamauth=(password)
The following sqlhosts file entry shows a Distributed Relational Database Architecture™ (DRDA®) connection that is configured to use PAM password authentication: 
ifxserver3 drsoctcp serverdrda portnum3 s=4,pam_serv=(pam_pass),pamauth=(password)