Home
SecurityYou can secure your HCL OneDB™ database server and the data that is stored in your HCL OneDB™ databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL OneDB™The HCL OneDB™ Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Securing data
Connection securityYou can administer the security of the connections to the database server by using authentication and authorization processes.
Pluggable authentication modules (UNIX™ or Linux™)A Pluggable Authentication Module (PAM) is a well-defined framework for supporting different authentication modules that were originally developed by Sun Microsystems. PAM is supported in both 32- and 64-bit modes on Solaris, Linux™, HP-UX and AIX®.
Configuring a connection to use PAMYou configure a connection to use a pluggable authentication module (PAM) by adding the PAM options to the connection information in the sqlhosts file.

Configuring a connection to use PAM

You configure a connection to use a pluggable authentication module (PAM) by adding the PAM options to the connection information in the sqlhosts file.

About this task

To configure a connection to use PAM, you must know:

The name of the PAM module.
Whether the PAM module raises a challenge in addition to accepting a simple user name and password combination.

Procedure

To configure PAM authentication for a connection:

Edit the sqlhosts file for the connection. Include the s=4 option and the PAM options pam_serv, to specify the PAM service, and pamauth, to specify the authentication mode.

Example

The following sqlhosts file entry shows a connection that is configured to use PAM challenge authentication:

ifxserver2 onsoctcp servermc portnum1 s=4,pam_serv=(pam_chal),pamauth=(challenge)

The following sqlhosts file entry shows a connection that is configured to use PAM password authentication:

ifxserver2 onsoctcp servermc portnum2 s=4,pam_serv=(pam_pass),pamauth=(password)

The following sqlhosts file entry shows a Distributed Relational Database Architecture™ (DRDA®) connection that is configured to use PAM password authentication:

ifxserver3 drsoctcp serverdrda portnum3 s=4,pam_serv=(pam_pass),pamauth=(password)

Rate this topic

5 stars 4 stars 3 stars 2 stars 1 star

Comment on this topic.

By clicking this box, you acknowledge that you are NOT a U.S. Federal Government employee or agency, nor are you submitting information with respect to or on behalf of one. HCL provides software and services to U.S. Federal Government customers through its partners immixGroup, Inc. Contact this team at https://hcltechsw.com/resources/us-government-contact. Do not include any personal data in this Comment box.